Close Open Privacy Scan

link https://github.com/lobehub/lobe-chat

bolt Snapshot: commit d9ec9f1

science engine v1.5

schedule 2026-07-15T03:15:57.928151+00:00

smart_toy MCP server detected: @anthropic-ai/sdk, @modelcontextprotocol/sdk, openai — detected in dependencies, not a safety judgment.

Incomplete scan — only 20/200 dependencies were analyzed. Treat the score as provisional.

App Privacy Score

0 /100

High privacy risk — application leak confirmed

High risk · 4222 finding(s)

Dependency score: 27 (High risk)

bar_chart Score Breakdown

pii_flow −60

telemetry −25

egress −15

env_fs −3

list Scan Summary

80 high 34 medium 4108 low

First-party packages: 33

Dependency packages: 7

Ecosystem: npm

swap_horiz Confirmed data exfiltration in application code

External domains: 1-17-1-sandpack.codesandbox.io1.1.1.110.0.0.110.1.2.310.255.255.255169.254.169.254172.15.0.1172.16.0.1172.20.10.5172.31.255.255172.32.0.1192.167.1.1192.168.0.1192.168.1.1192.168.1.256192.168.255.255192.169.1.1256.256.256.256302.ai8.8.8.8a.comabc.comagent-gateway.lobehub.comai-gateway.vercel.shai-userxxxxxxxxxx.services.ai.azure.comai.360.cnai.360.comai.azure.comai.gitee.comai.google.devai.meta.comaiart.tencent.comaihubmix.comalipaytbox.yuque.comanalytics.umami.isanother.comanthropic.comapi-data.line.meapi-inference.modelscope.cnapi.302.aiapi.360.cnapi.abc.comapi.ai21.comapi.anthropic.comapi.anthropic.proxyapi.baichuan-ai.comapi.bfl.aiapi.bochaai.comapi.cerebras.aiapi.cloudai.tencent.comapi.cloudflare.comapi.codesandbox.ioapi.cohere.aiapi.cohere.comapi.comapi.cometapi.comapi.custom.comapi.deepseek.comapi.exa.aiapi.firecrawl.devapi.fireworks.aiapi.github.comapi.githubcopilot.comapi.groq.comapi.kimi.comapi.line.meapi.lingyiwanwu.comapi.lkeap.cloud.tencent.comapi.longcat.chatapi.minimax.ioapi.minimaxi.comapi.mistral.aiapi.moonshot.cnapi.newapi.comapi.novita.aiapi.openai.comapi.perplexity.aiapi.ppinfra.comapi.replicate.comapi.sambanova.aiapi.search.brave.comapi.search1api.comapi.sgroup.qq.comapi.siliconflow.cnapi.slack.comapi.stepfun.comapi.straico.comapi.studio.nebius.comapi.tavily.comapi.tbox.cnapi.telegram.orgapi.test.comapi.together.xyzapi.upstage.aiapi.v0.devapi.x.aiapi.xiaomimimo.comapig.console.aliyun.comapp.composio.devapp.lobehub.comapp.posthog.comapp.test.comark.ap-southeast.bytepluses.comark.cn-beijing.volces.comarxiv.orgauthauth.x.aiavatar.urlavatars0.githubusercontent.comazure.microsoft.comb.combackend.composio.devbad-url.combaijiahao.baidu.combaike.baidu.combedrock-runtimebedrock-runtime-fipsbfl.aibiz.finance.sina.com.cnbluebubbles.appbots.qq.combuild.nvidia.comcdncdn.discordapp.comcdn.examplecdn.hailuoai.comcdn.jsdelivr.netcdn.minimax.comcdn.openai.comcdn.qwen.comcdn.siliconcloud.cncdn.tailwindcss.comcdn.wenxin.comcdn.x.aicdn.zhipu.aicerebras.aichaoyu.bisu.edu.cnchat-plugins.lobehub.comchat-preview.lobehub.comchat.intern-ai.org.cnchatapi.akash.networkchatgpt.comchrome.browserless.iocitation.comclaude.aicloud.baidu.comcloud.google.comcloud.infini-ai.comcloud.langfuse.comcloud.lobehub.comcloud.sambanova.aicloud.tencent.comcloud.zidongtaichu.comcm.cau.edu.cncodesandbox.iocoding.dashscope.aliyuncs.comcohere.comcometapi.comcomposio.devconsole.bce.baidu.comconsole.cloud.google.comconsole.cloud.tencent.comconsole.groq.comcustomcustom-api.bfl.aicustom-azure.openai.azure.comcustom-comfyuicustom-endpoint.comcustom-ollamacustom-proxy.new-api.comcustom.api.comcustom.baidubce.comcustom.cloudflare.urlcustom.cohere.aicustom.comcustom.mocked.urlcustom.modelscope.cncustom.ollama.comcustom.openrouter.aicustom.spark.comcustom.urlcvpr.thecvf.comdashboard.composio.devdashscope-intl.aliyuncs.comdashscope.aliyuncs.comdashscope.oss-cn-beijing.aliyuncs.comdatatracker.ietf.orgdeepsearch.jina.aideepseek.comdemo.comdeveloper.mozilla.orgdeveloper.qiniu.comdevelopers.cloudflare.comdevelopers.line.bizdevelopers.openai.comdevelopers.upstage.aidevice-gateway.lobehub.comdiscord.comdiscord.ggdiscord.js.orgdocs.ai21.comdocs.aihubmix.comdocs.anthropic.comdocs.aws.amazon.comdocs.cohere.comdocs.composio.devdocs.expo.devdocs.fal.aidocs.mistral.aidocs.perplexity.aidocs.together.aidocs.vllm.aidocs.x.aidocs.z.aie.comethereal.emailexample1.comexample2.comexample3.comfailed.comfal.aifallback-endpoint.comfiles.examplefiles.slack.comfireworks.aifirst.comfist.xjtu.edu.cnfonts.googleapis.comfonts.gstatic.comgateway.ai.cloudflare.comgateway.test.comgenerativelanguage.googleapis.comgithub.comgitlab.comgroq.comgw.test.comhello.mockhelp.aliyun.comhigress.cnhooks.slack.comhttpbin.orghub-apac-1.lobeobjects.spacehuggingface.cohunyuan.tencent.comhyimg.tencentmaas.comi.redd.iticons.duckduckgo.comilinkai.weixin.qq.comimg.pnginference-docs.cerebras.aiinference.readthedocs.iointegrate.api.nvidia.cominternlm.intern-ai.org.cninvalid-url.comissuer.comjina.aikagi.comlearn.microsoft.comlinear.appling.tbox.cnlmstudio.ailobe.lilobechat.comlobehub.comlocal.filelongcat.chatm.mp.oeeee.comm.thepaper.cnmarket.lobehub.commedia.discordapp.netmedium.commetadata.google.internalminimax-cdn.commistral.aiml.azure.commodels.devmodels.github.aimodelscope.cnmoment.rednet.cnmultimedia.nt.qq.com.cnmy-aihubmix-mirror.commy-azure.openai.azure.commy-server.commyapp.commyresource.cognitiveservices.azure.comnebius.comnew-avatar.comnew.qq.comnextra.vercel.appnovac2c.cdn.weixin.qq.comnovita.ainpmmirror.comoaidalleapiprodscus.blob.core.windows.netollama.comopen.bigmodel.cnopen.feishu.cnopen.larksuite.comopenai.comopenai.qiniu.comopencode.aiopenrouter.aip4-fdl.klingai.compinchwork.devplacekitten.complatform.baichuan-ai.complatform.claude.complatform.deepseek.complatform.lingyiwanwu.complatform.minimax.ioplatform.minimaxi.complatform.moonshot.aiplatform.openai.complatform.sensenova.cnplatform.stepfun.complatform.xiaomimimo.complausible.ioplay.google.complugin.anspire.cnppinfra.compreview-url.vercel.apppreview.sandpack-static-server.codesandbox.ioq.qq.comqianfan-img-gen.bj.bcebos.comqianfan-model.bj.bcebos.comqianfan.baidubce.comqstash-eu-central-1.upstash.ioqstash.upstash.iorr.jina.air.jinaai.cnraw.githubusercontent.comregistry.npmjs.orgregistry.npmmirror.comreplicate.comrest.fal.airesult1.comresult2.comrlzy.gdufe.edu.cnrouter.huggingface.coss.jina.ais.jinaai.cns3s3-fipss3-fips.dualstacks3-fips.dualstack.us-east-1s3-fips.us-east-1s3-object-lambdas3-object-lambda-fipss3.amazonaws.coms3.dualstacks3.dualstack.us-east-1s3express-controlsandbox.api.sgroup.qq.comsandpack-bundler.codesandbox.iosandpack.codesandbox.ioscribe.ripsecond.comself-hosted.examplesignedsiliconflow.cnslack.comsogou.comsource1.comsource2.comspace.bilibili.comspark-api-open.xf-yun.comstepfun.comstorage.googleapis.comstraico.comstudio.ai21.comstudio.nebius.comsuccess1.comsuccess2.comt.metech.sina.cntelemetry.composio.devtest-azure.openai.azure.comtest-ollama-url.localtest-searxng.comtest.azure.comtest.cognitiveservices.azure.comtest.comtest.openai.azure.comtest.unstructured.iotest1.comtest2.comtestflight.apple.comthird.comtianqi.moji.comtianqi.so.comtoken.sensenova.cntokenhub.tencentmaas.comunknown-endpoint.comunpkg.comupstage.aiuse-for-dev.r2.cloudflarestorage.comuser-azure.openai.azure.comuser-ollama-urlv.qq.comv0.devvalid.comvercel.comvertex-endpoint.comvertexaisearch.cloud.google.comwallstreetcn.comwanqing.streamlakeapi.comweather.cma.cnwenxin.comwizardforcel.gitbooks.ioworkflow-run-guard.localwww.36kr.comwww.accuweather.comwww.aliyun.comwww.bilibili.comwww.bing.comwww.chinanews.comwww.chinanews.com.cnwww.comfy.orgwww.douyin.comwww.example.co.ukwww.gks.mof.gov.cnwww.google.comwww.googleapis.comwww.hzqx.comwww.lingyiwanwu.comwww.minimaxi.comwww.mnw.cnwww.moonshot.aiwww.perplexity.aiwww.qiniu.comwww.qiumiwu.comwww.reddit.comwww.search1api.comwww.sensenova.cnwww.streamlake.comwww.thepaper.cnwww.together.aiwww.volcengine.comwww.w3.orgwww.weather.com.cnwww.xfyun.cnwww.youtube.comwww.zhihu.comxx.aix.comxai-cdn.comxinghuo.xfyun.cnxywctu-4000.preview.csb.appyour-proxy-url.comyour-resource.cognitiveservices.azure.comyour-server.comyour.new-api-provider.comyourapi.cnz.aizenmux.aizh.m.wikipedia.orgzh.numberempire.comzh.wikipedia.orgzhipuai.cnzhuanlan.zhihu.com

high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/scripts/docsWorkflow/utils.ts:87 → repo/scripts/docsWorkflow/utils.ts:96

high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/scripts/serverLauncher/startServer.js:131 → repo/scripts/serverLauncher/startServer.js:141

high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/scripts/serverLauncher/startServer.js:168 → repo/scripts/serverLauncher/startServer.js:185

high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/src/app/(backend)/market/oidc/[[...segments]]/route.ts:7 → repo/src/app/(backend)/market/oidc/[[...segments]]/route.ts:185

high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/src/layout/AuthProvider/MarketAuth/oidc.ts:142 → repo/src/layout/AuthProvider/MarketAuth/oidc.ts:150

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/modules/GitHub/index.ts:24 → repo/apps/server/src/modules/GitHub/index.ts:151

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/modules/GitHub/index.ts:24 → repo/apps/server/src/modules/GitHub/index.ts:184

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/modules/GitHub/index.ts:24 → repo/apps/server/src/modules/GitHub/index.ts:210

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:79

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:171

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:535

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:589

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:647

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:71

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:262

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:336

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:424

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:482

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:565

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:652

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:810

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → repo/apps/server/src/routers/lambda/market/socialProfile.ts:62

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → repo/apps/server/src/routers/lambda/market/socialProfile.ts:88

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → repo/apps/server/src/routers/lambda/market/socialProfile.ts:141

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → repo/apps/server/src/routers/lambda/market/socialProfile.ts:195

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/bot/BotMessageRouter.ts:749 → repo/apps/server/src/services/bot/BotMessageRouter.ts:767

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/bot/platforms/discord/api.ts:90 → repo/apps/server/src/services/bot/platforms/discord/api.ts:90

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/changelog/index.ts:34 → repo/apps/server/src/services/changelog/index.ts:54

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/changelog/index.ts:34 → repo/apps/server/src/services/changelog/index.ts:92

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/changelog/index.ts:34 → repo/apps/server/src/services/changelog/index.ts:207

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/desktopRelease/index.ts:120 → repo/apps/server/src/services/desktopRelease/index.ts:122

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/market/index.ts:13 → repo/apps/server/src/services/market/index.ts:210

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/market/index.ts:13 → repo/apps/server/src/services/market/index.ts:708

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/oauthDeviceFlow/index.ts:105 → repo/apps/server/src/services/oauthDeviceFlow/index.ts:105

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/oauthDeviceFlow/index.ts:169 → repo/apps/server/src/services/oauthDeviceFlow/index.ts:169

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55 → repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/search/impls/anspire/index.ts:74 → repo/apps/server/src/services/search/impls/anspire/index.ts:71

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/search/impls/bocha/index.ts:64 → repo/apps/server/src/services/search/impls/bocha/index.ts:61

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/search/impls/brave/index.ts:70 → repo/apps/server/src/services/search/impls/brave/index.ts:66

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/search/impls/exa/index.ts:69 → repo/apps/server/src/services/search/impls/exa/index.ts:65

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/search/impls/firecrawl/index.ts:69 → repo/apps/server/src/services/search/impls/firecrawl/index.ts:66

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/search/impls/jina/index.ts:48 → repo/apps/server/src/services/search/impls/jina/index.ts:44

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/search/impls/kagi/index.ts:52 → repo/apps/server/src/services/search/impls/kagi/index.ts:50

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/search/impls/search1api/index.ts:85 → repo/apps/server/src/services/search/impls/search1api/index.ts:82

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/search/impls/tavily/index.ts:40 → repo/apps/server/src/services/search/impls/tavily/index.ts:60

high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/workflows/runGuard/qstashCancel.ts:79 → repo/apps/server/src/workflows/runGuard/qstashCancel.ts:93

high first-party (npm): packages/web-crawler User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/web-crawler/src/crawImpl/browserless.ts:10 → repo/packages/web-crawler/src/crawImpl/browserless.ts:42

high first-party (npm): packages/web-crawler User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/web-crawler/src/crawImpl/exa.ts:25 → repo/packages/web-crawler/src/crawImpl/exa.ts:32

high first-party (npm): packages/web-crawler User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/web-crawler/src/crawImpl/firecrawl.ts:54 → repo/packages/web-crawler/src/crawImpl/firecrawl.ts:62

high first-party (npm): packages/web-crawler User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/web-crawler/src/crawImpl/jina.ts:11 → repo/packages/web-crawler/src/crawImpl/jina.ts:17

high first-party (npm): packages/web-crawler User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/web-crawler/src/crawImpl/search1api.ts:19 → repo/packages/web-crawler/src/crawImpl/search1api.ts:26

high first-party (npm): packages/web-crawler User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/web-crawler/src/crawImpl/tavily.ts:26 → repo/packages/web-crawler/src/crawImpl/tavily.ts:33

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:51 → repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:49

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:167 → repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:164

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/aihubmix/index.ts:163 → repo/packages/model-runtime/src/providers/aihubmix/index.ts:181

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/azureai/index.ts:33 → repo/packages/model-runtime/src/providers/azureai/index.ts:67

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/bfl/createImage.ts:125 → repo/packages/model-runtime/src/providers/bfl/createImage.ts:121

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/bfl/createImage.ts:161 → repo/packages/model-runtime/src/providers/bfl/createImage.ts:158

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/cloudflare/index.ts:77 → repo/packages/model-runtime/src/providers/cloudflare/index.ts:93

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/cloudflare/index.ts:77 → repo/packages/model-runtime/src/providers/cloudflare/index.ts:156

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/comfyui/index.ts:77 → repo/packages/model-runtime/src/providers/comfyui/index.ts:101

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/google/index.ts:135 → repo/packages/model-runtime/src/providers/google/index.ts:471

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/minimax/createVideo.ts:55 → repo/packages/model-runtime/src/providers/minimax/createVideo.ts:53

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/minimax/createVideo.ts:78 → repo/packages/model-runtime/src/providers/minimax/createVideo.ts:76

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/minimax/createVideo.ts:177 → repo/packages/model-runtime/src/providers/minimax/createVideo.ts:174

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/nebius/index.ts:34 → repo/packages/model-runtime/src/providers/nebius/index.ts:31

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:41 → repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:38

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:126 → repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:123

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/straico/index.ts:46 → repo/packages/model-runtime/src/providers/straico/index.ts:44

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:78 → repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:75

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:37 → repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:35

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:137 → repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:134

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/xai/createVideo.ts:35 → repo/packages/model-runtime/src/providers/xai/createVideo.ts:33

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/xai/createVideo.ts:127 → repo/packages/model-runtime/src/providers/xai/createVideo.ts:124

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/zhipu/createImage.ts:39 → repo/packages/model-runtime/src/providers/zhipu/createImage.ts:37

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/zhipu/createImage.ts:134 → repo/packages/model-runtime/src/providers/zhipu/createImage.ts:131

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:41 → repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:39

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:147 → repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:144

high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/zhipu/index.ts:222 → repo/packages/model-runtime/src/providers/zhipu/index.ts:220

medium first-party (npm): apps/server Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.

repo/apps/server/src/services/bot/BotMessageRouter.ts:749 → repo/apps/server/src/services/bot/BotMessageRouter.ts:767

hub Dependency data flows (1)

high @fal-ai/client dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/npm/@[email protected]/src/request.js:29 → pkgs/npm/@[email protected]/src/request.js:52

</> First-Party Code

first-party (npm): apps/server

npm first-party

high pii_flow production #3bf1809531d41882 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/modules/GitHub/index.ts:151 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/modules/GitHub/index.ts:24 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/modules/GitHub/index.ts:151

    const response = await fetch(zipUrl, {
      headers: {
        'User-Agent': this.userAgent,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #4eec90cd3f09c6b8 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/modules/GitHub/index.ts:184 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/modules/GitHub/index.ts:24 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/modules/GitHub/index.ts:184

    const response = await fetch(rawUrl, {
      headers: {
        'User-Agent': this.userAgent,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #a0e96b1e4b152007 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/modules/GitHub/index.ts:210 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/modules/GitHub/index.ts:24 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/modules/GitHub/index.ts:210

    const response = await fetch(rawUrl, {
      headers: {
        'User-Agent': this.userAgent,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #54fea820843500b6 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agent.ts:79 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agent.ts:79

    const response = await fetch(userInfoUrl, {
      headers,
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #4127ca3457161d00 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agent.ts:171 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agent.ts:171

    const response = await fetch(forkUrl, {
      body: JSON.stringify({
        identifier: item.identifier,
        name: item.name,
        status: item.status,
        versionNumber: item.versionNumber,
        visibility: item.visibility,
      }),
      headers,
      method: 'POST',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #8620fe8589bfca80 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agent.ts:535 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agent.ts:535

        const response = await fetch(url, { headers, method: 'GET' });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #cfbcd4c444dbbc30 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agent.ts:589 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agent.ts:589

        const response = await fetch(forkSourceUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #842fbc552e147cdb — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agent.ts:647 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agent.ts:647

        const response = await fetch(forksUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #c6749bfdf677de74 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agentGroup.ts:71 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agentGroup.ts:71

    const response = await fetch(userInfoUrl, {
      headers,
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #a8026caa17f0e06a — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agentGroup.ts:262 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agentGroup.ts:262

        const response = await fetch(deprecateUrl, {
          headers,
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #78329a9af440da4d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agentGroup.ts:336 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agentGroup.ts:336

        const response = await fetch(forkUrl, {
          body: JSON.stringify({
            identifier: input.identifier,
            name: input.name,
            status: input.status,
            versionNumber: input.versionNumber,
            visibility: input.visibility,
          }),
          headers,
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #bab54ecd43155edd — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agentGroup.ts:424 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agentGroup.ts:424

        const response = await fetch(forkSourceUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #ebe739ff6cd0aa66 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agentGroup.ts:482 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agentGroup.ts:482

        const response = await fetch(forksUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #499701856c2ade58 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agentGroup.ts:565 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agentGroup.ts:565

        const response = await fetch(listUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #aef3be4673528277 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agentGroup.ts:652 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agentGroup.ts:652

        const response = await fetch(publishUrl, {
          headers,
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #54962887172cc53c — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/agentGroup.ts:810 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/agentGroup.ts:810

        const response = await fetch(unpublishUrl, {
          headers,
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #99862e97b20de8bc — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/socialProfile.ts:62 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/socialProfile.ts:62

            const response = await fetch(`${MARKET_BASE_URL}/api/v1/user/claims`, {
              body: JSON.stringify({
                assetId: Number(skillId),
                assetType: 'skill',
              }),
              headers: {
                ...headers,
                'Content-Type': 'application/json',
              },
              method: 'POST',
            });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #7fac42221ac0cb25 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/socialProfile.ts:88 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/socialProfile.ts:88

            const response = await fetch(`${MARKET_BASE_URL}/api/v1/user/claims`, {
              body: JSON.stringify({
                assetId: Number(pluginId),
                assetType: 'plugin',
              }),
              headers: {
                ...headers,
                'Content-Type': 'application/json',
              },
              method: 'POST',
            });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #4c8bbcd376538204 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/socialProfile.ts:141 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/socialProfile.ts:141

      const response = await fetch(`${MARKET_BASE_URL}/api/v1/user/claims/scan`, {
        headers,
        method: 'GET',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #dbea40296ca64fd1 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/routers/lambda/market/socialProfile.ts:195 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/routers/lambda/market/socialProfile.ts:195

        const response = await fetch(`${MARKET_BASE_URL}/api/v1/user/claims/submit-repo`, {
          body: JSON.stringify({
            branch: input.branch,
            gitUrl: input.gitUrl,
            type: input.type,
          }),
          headers: {
            ...headers,
            'Content-Type': 'application/json',
            ...(input.actAs === undefined
              ? {}
              : { 'x-lobe-owner-account-id': String(input.actAs) }),
          },
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #840dd5970965157f — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/bot/BotMessageRouter.ts:767 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/bot/BotMessageRouter.ts:749 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/bot/BotMessageRouter.ts:767

        await thread.post(text);

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #a45bd7de9f674391 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/bot/platforms/discord/api.ts:90 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/bot/platforms/discord/api.ts:90 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/bot/platforms/discord/api.ts:90

    const data = (await this.rest.post(Routes.userChannels(), {
      body: { recipient_id: recipientId },
    })) as { id: string };

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #f8db7e8b40af34da — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/changelog/index.ts:54 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/changelog/index.ts:34 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/changelog/index.ts:54

      const res = await fetch(url, {
        next: { revalidate: 3600, tags: [FetchCacheTag.Changelog] },
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #1ea870df8ff6b4f6 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/changelog/index.ts:92 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/changelog/index.ts:34 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/changelog/index.ts:92

      const response = await fetch(url, {
        next: { revalidate: 3600, tags: [FetchCacheTag.Changelog] },
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #c334d57269f27441 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/changelog/index.ts:207 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/changelog/index.ts:34 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/changelog/index.ts:207

        const res = await fetch(url);

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #f76f1621216e757e — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/desktopRelease/index.ts:122 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/desktopRelease/index.ts:120 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/desktopRelease/index.ts:122

  const res = await fetch(`https://api.github.com/repos/${owner}/${repo}/releases/latest`, {
    headers: {
      ...(token ? { Authorization: `Bearer ${token}` } : {}),
      'Accept': 'application/vnd.github+json',
      'User-Agent': 'lobehub-server',
    },
    next: { revalidate: 300, tags: [FetchCacheTag.DesktopRelease] },
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #eb66a6804cf70a2e — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/market/index.ts:210 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/market/index.ts:13 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/market/index.ts:210

    const response = await fetch(userInfoUrl, {
      // @ts-ignore
      headers: this.market.headers,
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #21cc69fc067f0b45 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/market/index.ts:708 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/market/index.ts:13 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/market/index.ts:708

    const response = await fetch(uploadUrl, {
      body: formData,
      headers: authHeaders,
      method: 'POST',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #bcac6c170622ae74 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/oauthDeviceFlow/index.ts:105 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/oauthDeviceFlow/index.ts:105 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/oauthDeviceFlow/index.ts:105

    const response = await fetch(config.tokenEndpoint, {
      body: new URLSearchParams({
        client_id: config.clientId,
        device_code: deviceCode,
        grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
      }).toString(),
      headers: {
        'Accept': 'application/json',
        'Content-Type': 'application/x-www-form-urlencoded',
      },
      method: 'POST',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #ae4dbbc3cb01ea6c — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/oauthDeviceFlow/index.ts:169 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/oauthDeviceFlow/index.ts:169 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/oauthDeviceFlow/index.ts:169

    const response = await fetch(config.tokenEndpoint, {
      body: new URLSearchParams({
        client_id: config.clientId,
        grant_type: 'refresh_token',
        refresh_token: refreshToken,
      }).toString(),
      headers: {
        'Accept': 'application/json',
        'Content-Type': 'application/x-www-form-urlencoded',
      },
      method: 'POST',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #8ad928640ba765f0 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55

    const response = await fetch(GithubCopilotOAuthService.TOKEN_EXCHANGE_URL, {
      headers: {
        'Accept': 'application/json',
        'Authorization': `token ${oauthToken}`,
        'User-Agent': 'LobeChat/1.0',
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #ba08ddb796a803ef — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/search/impls/anspire/index.ts:71 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/search/impls/anspire/index.ts:74 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/search/impls/anspire/index.ts:71

      response = await fetch(`${endpoint}?${searchParams.toString()}`, {
        headers: {
          'Accept': '*/*',
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Connection': 'keep-alive ',
          'Content-Type': 'application/json',
        },
        method: 'GET',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #7ffb28094d5c0921 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/search/impls/bocha/index.ts:61 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/search/impls/bocha/index.ts:64 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/search/impls/bocha/index.ts:61

      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #31e2071f416e79f5 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/search/impls/brave/index.ts:66 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/search/impls/brave/index.ts:70 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/search/impls/brave/index.ts:66

      response = await fetch(`${endpoint}?${searchParams.toString()}`, {
        headers: {
          'Accept': 'application/json',
          'Accept-Encoding': 'gzip',
          'X-Subscription-Token': this.apiKey ? this.apiKey : '',
        },
        method: 'GET',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #2f0eecba2fc8851c — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/search/impls/exa/index.ts:65 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/search/impls/exa/index.ts:69 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/search/impls/exa/index.ts:65

      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Content-Type': 'application/json',
          'x-api-key': this.apiKey ? this.apiKey : '',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #26c905029baba1b6 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/search/impls/firecrawl/index.ts:66 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/search/impls/firecrawl/index.ts:69 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/search/impls/firecrawl/index.ts:66

      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #d5d22f0eb0fffe46 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/search/impls/jina/index.ts:44 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/search/impls/jina/index.ts:48 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/search/impls/jina/index.ts:44

      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Accept': 'application/json',
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
          'X-Respond-With': 'no-content',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #a704801041440ab5 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/search/impls/kagi/index.ts:50 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/search/impls/kagi/index.ts:52 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/search/impls/kagi/index.ts:50

      response = await fetch(`${endpoint}?${searchParams.toString()}`, {
        headers: {
          Authorization: this.apiKey ? `Bot ${this.apiKey}` : '',
        },
        method: 'GET',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #78b307df352b687a — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/search/impls/search1api/index.ts:82 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/search/impls/search1api/index.ts:85 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/search/impls/search1api/index.ts:82

      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #a41abb9347b389f3 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/services/search/impls/tavily/index.ts:60 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/search/impls/tavily/index.ts:40 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/services/search/impls/tavily/index.ts:60

      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #2ae3efb849b63e82 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/apps/server/src/workflows/runGuard/qstashCancel.ts:93 · flow /tmp/closeopen-c0i_3jq8/repo/apps/server/src/workflows/runGuard/qstashCancel.ts:79 → /tmp/closeopen-c0i_3jq8/repo/apps/server/src/workflows/runGuard/qstashCancel.ts:93

  const response = await fetch(new URL('/v2/workflows/runs', qstashUrl), {
    body: JSON.stringify({ workflowUrl: [workflowUrlPrefix] }),
    headers: {
      'Authorization': `Bearer ${token}`,
      'Content-Type': 'application/json',
    },
    method: 'DELETE',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

medium pii_flow production #53f104e40ffa0266 — Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.

        await thread.post(text);

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

medium telemetry production #bb9cff6e281c4301 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/apps/server/src/services/user/index.ts:45

    analytics?.track({
      name: 'user_register_completed',
      properties: {
        spm: 'user_service.init_user.user_created',
      },
      userId: user.id,
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 288 low-confidence finding(s)

low env_fs production #72968f680bd72164 — Environment-variable access.

repo/apps/server/src/agent-hono/handlers/finalizeAbandoned.ts:67

      if (process.env.QSTASH_TOKEN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #441e8469e0dfa29d — Environment-variable access.

repo/apps/server/src/agent-hono/handlers/gatewayCron.ts:42

    appUrl: process.env.APP_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a6d37c0030818f1b — Environment-variable access.

repo/apps/server/src/agent-hono/handlers/gatewayCron.ts:191

  if (process.env.MESSAGE_GATEWAY_URL && process.env.MESSAGE_GATEWAY_SERVICE_TOKEN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #db2aedd6aa8b267c — Environment-variable access.

repo/apps/server/src/agent-hono/index.ts:55

  bearerSecretAuth(() => process.env.CRON_SECRET),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a7a90f2a10217529 — Environment-variable access.

repo/apps/server/src/agent-hono/index.ts:62

  bearerSecretAuth(() => process.env.KEY_VAULTS_SECRET),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eeeaf06e8be4a81b — Environment-variable access.

repo/apps/server/src/agent-hono/middlewares/qstashOrApiKeyAuth.ts:28

  const apiKey = process.env.AGENT_EXEC_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #799c932b5f9b7d06 — Environment-variable access.

repo/apps/server/src/globalConfig/genServerAiProviderConfig.test.ts:39

        delete process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #817ea98533e71740 — Environment-variable access.

repo/apps/server/src/globalConfig/genServerAiProviderConfig.test.ts:100

    process.env.OPENAI_MODEL_LIST = '+gpt-4,+gpt-3.5-turbo';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5ff8934271b0724d — Environment-variable access.

repo/apps/server/src/globalConfig/genServerAiProviderConfig.test.ts:118

    process.env.CUSTOM_OPENAI_MODELS = '+custom-model';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bd5e22927dccaa71 — Environment-variable access.

repo/apps/server/src/globalConfig/genServerAiProviderConfig.test.ts:134

    process.env.OPENAI_MODEL_LIST = '+gpt-4->deployment1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b8ea172a1feceef9 — Environment-variable access.

repo/apps/server/src/globalConfig/genServerAiProviderConfig.ts:47

        process.env[providerConfig.modelListKey ?? `${providerUpperCase}_MODEL_LIST`];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3f2524cbf8ebc302 — Environment-variable access.

repo/apps/server/src/globalConfig/index.ts:64

      fetchOnClient: isDesktop ? false : !process.env.OLLAMA_PROXY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b98864cc82d6a2f1 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:7

const originalWorkflowParallelism = process.env[WORKFLOW_PARALLELISM_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #10755856bf600c40 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:12

      delete process.env[WORKFLOW_PARALLELISM_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cbce27044b74680e — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:16

    process.env[WORKFLOW_PARALLELISM_ENV] = originalWorkflowParallelism;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cfe529251e929a38 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:20

    delete process.env[WORKFLOW_PARALLELISM_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5760e693985f59de — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:26

    process.env[WORKFLOW_PARALLELISM_ENV] = '17';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a3aaa49dcbc7ebd2 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:32

    process.env[WORKFLOW_PARALLELISM_ENV] = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #55ea67586a81f3b5 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:36

    process.env[WORKFLOW_PARALLELISM_ENV] = 'abc';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #511016331cf02016 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:107

  const apiKey = process.env.MEMORY_USER_MEMORY_GATEKEEPER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bb31c3b034bbfcfe — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:108

  const baseURL = process.env.MEMORY_USER_MEMORY_GATEKEEPER_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #16ac75082294362c — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:109

  const model = process.env.MEMORY_USER_MEMORY_GATEKEEPER_MODEL || DEFAULT_MINI_MODEL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #76b3ed9f185f2a32 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:110

  const provider = process.env.MEMORY_USER_MEMORY_GATEKEEPER_PROVIDER || DEFAULT_MINI_PROVIDER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #19ecdfc46465e717 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:111

  const language = process.env.MEMORY_USER_MEMORY_GATEKEEPER_LANGUAGE || 'English';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #880ff5682a2c9296 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:123

  const model = process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_MODEL || fallback.model;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7e8d84bba4433e1e — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:125

    process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_PROVIDER ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #663545633c2009c4 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:130

    apiKey: process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_API_KEY ?? fallback.apiKey,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7af3f8d0533f5c15 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:131

    baseURL: process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_BASE_URL ?? fallback.baseURL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ec85693cc949c16b — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:132

    language: process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_LANGUAGE ?? fallback.language,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #446876d9b347830e — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:139

  const apiKey = process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #278ab78bc93a17c1 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:140

  const baseURL = process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d9a5f76b75e17596 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:141

  const model = process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_MODEL || fallbackModel;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #55d207f7fa77fe88 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:142

  const provider = process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_PROVIDER || DEFAULT_MINI_PROVIDER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #79f1b1fa92c91fd4 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:145

    process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_CONTEXT_LIMIT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3d71fddd39bd431d — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:151

      const override = (process.env as Record<string, string | undefined>)[envKey];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0b858fb40f3f1e4a — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:176

  const model = process.env.MEMORY_USER_MEMORY_EMBEDDING_MODEL || fallbackModel || defaultModel;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4e36d33defcebed7 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:178

    process.env.MEMORY_USER_MEMORY_EMBEDDING_PROVIDER ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c74f07b327a7de25 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:184

    apiKey: process.env.MEMORY_USER_MEMORY_EMBEDDING_API_KEY ?? fallbackApiKey,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7e5486da24c4faf8 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:185

    baseURL: process.env.MEMORY_USER_MEMORY_EMBEDDING_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #125340907d27add4 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:188

    contextLimit: parseTokenLimitEnv(process.env.MEMORY_USER_MEMORY_EMBEDDING_CONTEXT_LIMIT),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #45557e32f2a5feb4 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:199

  const model = process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_MODEL || fallbackModel;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #40b19aa9fa2dd1a7 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:201

    process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_PROVIDER ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #51b5a2b1ee192ebe — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:206

    apiKey: process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_API_KEY ?? fallbackApiKey,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7b4fe98e5b740a51 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:207

    baseURL: process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dad6fd9d85263017 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:209

    contextLimit: parseTokenLimitEnv(process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_CONTEXT_LIMIT),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7d21e5636bf96158 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:216

  const accessKeyId = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_ACCESS_KEY_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #83ee0a8aca21caa2 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:217

  const secretAccessKey = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_SECRET_ACCESS_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f9d1e26ce66c1b4f — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:218

  const bucketName = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_BUCKET_NAME;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #304a8619fa7baccd — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:219

  const region = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_REGION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c5423978f89fa659 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:220

  const endpoint = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_ENDPOINT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #61131c82c5a09c5d — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:221

  const forcePathStyle = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_FORCE_PATH_STYLE === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2a00ecaebf44fbda — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:222

  const pathPrefix = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_PATH_PREFIX;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9764b3860c1eefdd — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:268

    enableBenchmarkLoCoMo: process.env.MEMORY_USER_MEMORY_FEATURE_FLAG_BENCHMARK_LOCOMO === 'true',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0c2fbd1fcbf8cec7 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:270

  const concurrencyRaw = process.env.MEMORY_USER_MEMORY_CONCURRENCY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1d32d19508dbee27 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:278

    process.env.MEMORY_USER_MEMORY_WORKFLOW_PROCESS_USER_TOPICS_PARALLELISM,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d150e19ddca91a2d — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:282

    process.env.MEMORY_USER_MEMORY_WORKFLOW_MAX_TOPICS_PER_USER_PER_RUN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #30510a43758c8abc — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:286

  const whitelistUsers = process.env.MEMORY_USER_MEMORY_WHITELIST_USERS?.split(',')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #460d9b717f402954 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:290

  const webhookHeaders = process.env.MEMORY_USER_MEMORY_WEBHOOK_HEADERS?.split(',')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7a8b50a71d42cd54 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:300

  const upstashWorkflowExtraHeaders = process.env.MEMORY_USER_MEMORY_WORKFLOW_EXTRA_HEADERS?.split(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #24de495c57ad4be9 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:313

    process.env.MEMORY_USER_MEMORY_GATEKEEPER_PREFERRED_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d87940e87d19138c — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:316

    process.env.MEMORY_USER_MEMORY_GATEKEEPER_PREFERRED_MODELS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fc1c494f6815bf12 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:319

    process.env.MEMORY_USER_MEMORY_EMBEDDING_PREFERRED_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #58e518f47cc29726 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:322

    process.env.MEMORY_USER_MEMORY_EMBEDDING_PREFERRED_MODELS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #32eac739c215b945 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:325

    process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_PREFERRED_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #22cc6fe3b2ebf7c5 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:328

    process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_PREFERRED_MODELS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bf256655416ba505 — Environment-variable access.

repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:348

      baseUrl: process.env.MEMORY_USER_MEMORY_WEBHOOK_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #86a902c799aaf2ee — Environment-variable access.

repo/apps/server/src/hono/dev.ts:6

const env = process.env.NODE_ENV || 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #53e0fafe015ee9ec — Environment-variable access.

repo/apps/server/src/hono/dev.ts:31

(process.env as Record<string, string | undefined>).NODE_ENV ||= 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #364a547378c46584 — Environment-variable access.

repo/apps/server/src/hono/standalone.ts:15

  const parsed = Number.parseInt(process.env.HONO_PORT ?? process.env.PORT ?? '', 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e93d913af4322d1d — Environment-variable access.

repo/apps/server/src/hono/standalone.ts:72

const host = process.env.HONO_HOST || DEFAULT_HOST;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cc1c8c8eb1809c11 — Environment-variable access.

repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:12

    originalSecret = process.env.KEY_VAULTS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #be221acd545e8c0f — Environment-variable access.

repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:13

    process.env.KEY_VAULTS_SECRET = 'Q10pwdq00KXUu9R+c8A8p4PSlIRWi7KwgUophBtkHVk=';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f689178a7d43a3b2 — Environment-variable access.

repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:19

    process.env.KEY_VAULTS_SECRET = originalSecret;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c0296dc981bea015 — Environment-variable access.

repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:41

    process.env.KEY_VAULTS_SECRET = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b1c65efb30cc88af — Environment-variable access.

repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:52

    process.env.KEY_VAULTS_SECRET = Buffer.from('short').toString('base64');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #18378352c072aace — Environment-variable access.

repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:86

      process.env.KEY_VAULTS_SECRET = 'ofQiJCXLF8mYemwfMWLOHoHimlPu91YmLfU7YZ4lreQ=';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #47878263eec0a3f4 — Environment-variable access.

repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:36

      process.env.API_KEY_SELECT_MODE = 'random';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #26b9d9dcc2d3aa2c — Environment-variable access.

repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:44

      process.env.API_KEY_SELECT_MODE = 'turn';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ccb35eed7a29e47e — Environment-variable access.

repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:61

      process.env.API_KEY_SELECT_MODE = 'random';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #23074fba20d59991 — Environment-variable access.

repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:72

      process.env.API_KEY_SELECT_MODE = 'turn';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a22e6b0cd98b380c — Environment-variable access.

repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:95

      process.env.API_KEY_SELECT_MODE = 'random';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #55603bb1a53af7b5 — Environment-variable access.

repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:107

      process.env.API_KEY_SELECT_MODE = 'turn';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8165d65a3e35722e — Environment-variable access.

repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:120

      process.env.API_KEY_SELECT_MODE = nanoid();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bed85bff55be7ea0 — Environment-variable access.

repo/apps/server/src/modules/ModelRuntime/index.test.ts:504

      process.env.OPENAI_PROXY_URL = 'https://proxy.example.com/v1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2b698cf844caf0c9 — Environment-variable access.

repo/apps/server/src/modules/ModelRuntime/index.test.ts:514

      process.env.OPENAI_PROXY_URL = 'https://proxy.example.com/v1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #249b13cbcaab0503 — Environment-variable access.

repo/apps/server/src/modules/ModelRuntime/index.ts:202

      const baseURL = payload?.baseURL || process.env[`${upperProvider}_PROXY_URL`];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f96df4055249dd67 — Environment-variable access.

repo/apps/server/src/modules/ModelRuntime/index.ts:208

      const baseURL = payload?.baseURL || process.env.OLLAMA_PROXY_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a7a8c231632674eb — Environment-variable access.

repo/apps/server/src/modules/ModelRuntime/index.ts:354

  const rawCredentials = payload.apiKey || process.env.VERTEXAI_CREDENTIALS || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1da2c32de1d850a7 — Environment-variable access.

repo/apps/server/src/modules/ModelRuntime/index.ts:359

  const projectFromEnv = process.env.VERTEXAI_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #05c59d9f18ea38ee — Environment-variable access.

repo/apps/server/src/modules/ModelRuntime/index.ts:365

    process.env.VERTEXAI_LOCATION ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f3b520923aea9328 — Environment-variable access.

repo/apps/server/src/routers/async/__tests__/caller.test.ts:173

      const originalEnv = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #7e127900d9d48368 — Environment-variable access.

repo/apps/server/src/routers/async/__tests__/caller.test.ts:174

      process.env.VERCEL_AUTOMATION_BYPASS_SECRET = 'test-bypass-value';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #dd15e8103e335514 — Environment-variable access.

repo/apps/server/src/routers/async/__tests__/caller.test.ts:186

        process.env.VERCEL_AUTOMATION_BYPASS_SECRET = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #425729fbbdb6a030 — Environment-variable access.

repo/apps/server/src/routers/async/__tests__/caller.test.ts:188

        delete process.env.VERCEL_AUTOMATION_BYPASS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e5113af5fd4c8107 — Environment-variable access.

repo/apps/server/src/routers/async/__tests__/caller.test.ts:193

      delete process.env.VERCEL_AUTOMATION_BYPASS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #65f2b8cd34602d77 — Environment-variable access.

repo/apps/server/src/routers/async/caller.ts:22

  if (process.env.VERCEL_AUTOMATION_BYPASS_SECRET) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9c201da6360efdb5 — Environment-variable access.

repo/apps/server/src/routers/async/caller.ts:23

    headers['x-vercel-protection-bypass'] = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #61014e0cbbcb839c — Environment-variable access.

repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/execAgent.integration.test.ts:28

process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c013300ba6f47549 — Environment-variable access.

repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/execAgents.integration.test.ts:23

process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4c1c4fb452f55940 — Environment-variable access.

repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/execGroupAgent.integration.test.ts:24

process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2c9b4e997bd86bdc — Environment-variable access.

repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/multiRoundTools.integration.test.ts:25

process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #388868e92e345bf5 — Environment-variable access.

repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/serverCallAgent.integration.test.ts:28

process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #51fd0733d457fcd9 — Environment-variable access.

repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/serverSubAgent.integration.test.ts:28

process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #37a8abaf18bfc914 — Environment-variable access.

repo/apps/server/src/routers/lambda/composio.ts:181

      const callbackUrl = `${process.env.APP_URL || process.env.NEXTAUTH_URL || ''}/api/composio/oauth/callback`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3fa308ef27fcce42 — Environment-variable access.

repo/apps/server/src/routers/lambda/config/index.test.ts:28

          process.env.OPENAI_MODEL_LIST =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #730c45ef7c947943 — Environment-variable access.

repo/apps/server/src/routers/lambda/config/index.test.ts:37

          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5eae1dd5303ac17d — Environment-variable access.

repo/apps/server/src/routers/lambda/config/index.test.ts:41

          process.env.OPENAI_MODEL_LIST =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #831e21aa3dbabb7a — Environment-variable access.

repo/apps/server/src/routers/lambda/config/index.test.ts:50

          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1b3dd128b7df3ab7 — Environment-variable access.

repo/apps/server/src/routers/lambda/config/index.test.ts:54

          process.env.OPENAI_MODEL_LIST =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #87f0de6cef1e4f4a — Environment-variable access.

repo/apps/server/src/routers/lambda/config/index.test.ts:65

          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b42930d4cd3444b9 — Environment-variable access.

repo/apps/server/src/routers/lambda/config/index.test.ts:69

          process.env.OPENAI_MODEL_LIST = '-gpt-4';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #875b52f9040dfeec — Environment-variable access.

repo/apps/server/src/routers/lambda/config/index.test.ts:77

          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cef2a52a81ae05b7 — Environment-variable access.

repo/apps/server/src/routers/lambda/config/index.test.ts:81

          process.env.OPENAI_MODEL_LIST = '+gpt-4-1106-preview';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4f00764967fb6d3b — Environment-variable access.

repo/apps/server/src/routers/lambda/config/index.test.ts:91

          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2d3ea4d359389575 — Environment-variable access.

repo/apps/server/src/routers/lambda/config/index.test.ts:95

          process.env.OPENAI_MODEL_LIST = 'model1,model2,model3，model4';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4842439b902e1125 — Environment-variable access.

repo/apps/server/src/routers/lambda/config/index.test.ts:130

          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b026036fbde9d215 — Environment-variable access.

repo/apps/server/src/routers/lambda/config/index.test.ts:136

          process.env.OPENROUTER_MODEL_LIST =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #233bc3dfa601ac3f — Environment-variable access.

repo/apps/server/src/routers/lambda/config/index.test.ts:146

          process.env.OPENROUTER_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #26e5c2239db46933 — Environment-variable access.

repo/apps/server/src/routers/lambda/config/index.test.ts:151

        const originalApiKey = process.env.DEEPSEEK_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e161e4a5b4171c7d — Environment-variable access.

repo/apps/server/src/routers/lambda/config/index.test.ts:152

        delete process.env.DEEPSEEK_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8979f6f945b2fb6d — Environment-variable access.

repo/apps/server/src/routers/lambda/config/index.test.ts:159

          delete process.env.DEEPSEEK_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9e900b168e426f7a — Environment-variable access.

repo/apps/server/src/routers/lambda/config/index.test.ts:161

          process.env.DEEPSEEK_API_KEY = originalApiKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ca2c2abb26044413 — Environment-variable access.

repo/apps/server/src/routers/lambda/config/index.test.ts:169

      process.env.DEFAULT_AGENT_CONFIG =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1a840cdd1f7961e7 — Environment-variable access.

repo/apps/server/src/routers/lambda/config/index.test.ts:181

      process.env.DEFAULT_AGENT_CONFIG = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d10f06ade3cc6606 — Environment-variable access.

repo/apps/server/src/routers/lambda/config/index.test.ts:185

      process.env.DEFAULT_AGENT_CONFIG =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2ad0f00b54ba8e31 — Environment-variable access.

repo/apps/server/src/routers/lambda/config/index.test.ts:197

      process.env.DEFAULT_AGENT_CONFIG = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #ce487fed4561dd8a — Hardcoded external endpoint. Review what data is sent to this destination.

repo/apps/server/src/routers/lambda/exporter.ts:37

  const response = await fetch(REGULAR_FONT_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #4ef1f2b0307149a5 — Environment-variable access.

repo/apps/server/src/routers/lambda/image/index.ts:143

      if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #deab1cd1ae7f43c9 — Environment-variable access.

repo/apps/server/src/routers/lambda/market/agent.ts:15

const MARKET_BASE_URL = process.env.MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3c9b25b26922838a — Environment-variable access.

repo/apps/server/src/routers/lambda/market/agentGroup.ts:14

const MARKET_BASE_URL = process.env.MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5b29de29d8dd5ea5 — Environment-variable access.

repo/apps/server/src/routers/lambda/market/index.ts:707

          secure: process.env.NODE_ENV === 'production',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #09577c4e43e08e0c — Environment-variable access.

repo/apps/server/src/routers/lambda/market/index.ts:716

          secure: process.env.NODE_ENV === 'production',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d91cb0162ee71225 — Environment-variable access.

repo/apps/server/src/routers/lambda/market/socialProfile.ts:10

const MARKET_BASE_URL = process.env.MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f489f682bff36420 — Environment-variable access.

repo/apps/server/src/routers/lambda/userMemories.ts:931

      if (process.env.NODE_ENV !== 'production' && process.env.DEV_DISABLE_AUTO_MEMORY === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a2745f36dcf1a929 — Environment-variable access.

repo/apps/server/src/routers/lambda/video/index.ts:139

      if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ab4ba3f2a75b0e4c — Environment-variable access.

repo/apps/server/src/routers/lambda/video/index.ts:255

        const callbackBaseUrl = process.env.WEBHOOK_PROXY_URL || appEnv.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #346839bedd631040 — Environment-variable access.

repo/apps/server/src/services/agentRuntime/AgentRuntimeService.test.ts:164

    process.env.AGENT_RUNTIME_BASE_URL = 'http://localhost:3010';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2a9f14b30e5de6c9 — Environment-variable access.

repo/apps/server/src/services/agentRuntime/AgentRuntimeService.test.ts:196

    delete process.env.AGENT_RUNTIME_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #12d467bab27a8a16 — Environment-variable access.

repo/apps/server/src/services/agentRuntime/AgentRuntimeService.test.ts:202

      delete process.env.AGENT_RUNTIME_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #225a12cf1bc73a76 — Environment-variable access.

repo/apps/server/src/services/agentRuntime/AgentRuntimeService.test.ts:208

      process.env.AGENT_RUNTIME_BASE_URL = 'http://custom:3000';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bde00cfedd1897fa — Environment-variable access.

repo/apps/server/src/services/agentRuntime/AgentRuntimeService.ts:90

if (process.env.VERCEL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ad5f541b52288101 — Environment-variable access.

repo/apps/server/src/services/agentRuntime/AgentRuntimeService.ts:287

    const baseUrl = process.env.AGENT_RUNTIME_BASE_URL || appEnv.APP_URL || 'http://localhost:3010';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f703bcdd6086bf6c — Environment-variable access.

repo/apps/server/src/services/agentRuntime/hooks/HookDispatcher.ts:31

    : urlJoin(process.env.INTERNAL_APP_URL || process.env.APP_URL || '', url);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #918b8883aff1480e — Environment-variable access.

repo/apps/server/src/services/agentRuntime/hooks/HookDispatcher.ts:35

      const qstashToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8c33855bb44ae355 — Environment-variable access.

repo/apps/server/src/services/agentRuntime/hooks/HookDispatcher.ts:48

          ...(process.env.VERCEL_AUTOMATION_BYPASS_SECRET && {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #81fb58a176464d9c — Environment-variable access.

repo/apps/server/src/services/agentRuntime/hooks/HookDispatcher.ts:49

            'x-vercel-protection-bypass': process.env.VERCEL_AUTOMATION_BYPASS_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #69655c50ed510f15 — Environment-variable access.

repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:273

    const originalToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4fd82b31cd8a452f — Environment-variable access.

repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:278

      delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c75ef595a0b548f9 — Environment-variable access.

repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:282

      if (originalToken === undefined) delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d465ec57c181ce5b — Environment-variable access.

repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:283

      else process.env.QSTASH_TOKEN = originalToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f81f88016dad4b8e — Environment-variable access.

repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:305

      process.env.QSTASH_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #94ac68a8e075f1c6 — Environment-variable access.

repo/apps/server/src/services/agentRuntime/snapshotStore.ts:8

  const explicitValue = process.env.ENABLE_AGENT_S3_TRACING;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7118931dfad7315b — Environment-variable access.

repo/apps/server/src/services/agentRuntime/snapshotStore.ts:12

  return process.env.NODE_ENV === 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9f7e54504261e8c1 — Environment-variable access.

repo/apps/server/src/services/agentRuntime/snapshotStore.ts:49

  if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #185e0eb0199268c1 — Filesystem access.

repo/apps/server/src/services/agentSignal/__tests__/promptBoundaries.test.ts:9

const read = (filePath: string) => readFileSync(path.join(root, filePath), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #341e58218450d4df — Environment-variable access.

repo/apps/server/src/services/aiAgent/__tests__/execAgent.memory.test.ts:28

process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #438179bc14d2ee55 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/apps/server/src/services/bot/platforms/discord/client.ts:533

      const res = await fetch('https://discord.com/api/v10/users/@me', {
        headers: { Authorization: `Bot ${credentials.botToken}` },
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #b9a6c2f40f627cfa — Environment-variable access.

repo/apps/server/src/services/changelog/index.test.ts:261

        process.env.DOC_S3_PUBLIC_DOMAIN = 'https://cdn.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2a254fbcd11f05f4 — Environment-variable access.

repo/apps/server/src/services/changelog/index.ts:15

const docCdnPrefix = process.env.DOC_S3_PUBLIC_DOMAIN || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ef08e0ba4d7575c3 — Environment-variable access.

repo/apps/server/src/services/changelog/index.ts:34

    branch: process.env.DOCS_BRANCH || 'main',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e7e1f591d23810be — Environment-variable access.

repo/apps/server/src/services/changelog/index.ts:41

    urlTemplate: process.env.CHANGELOG_URL_TEMPLATE || URL_TEMPLATE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3dec55d3c94c62ed — Environment-variable access.

repo/apps/server/src/services/comfyui/core/comfyUIClientService.ts:70

        options.baseURL || process.env.COMFYUI_DEFAULT_URL || COMFYUI_DEFAULTS.BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e390199a256acff0 — Environment-variable access.

repo/apps/server/src/services/desktopRelease/index.ts:120

  const token = options?.token || process.env.GITHUB_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #592a5510bd6ca68c — Environment-variable access.

repo/apps/server/src/services/desktopRelease/index.ts:175

    options?.baseUrl || process.env.DESKTOP_UPDATE_SERVER_URL || process.env.UPDATE_SERVER_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1ce6a560096ac48c — Environment-variable access.

repo/apps/server/src/services/discover/index.ts:106

      process.env.MARKET_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b57609f9126983d6 — Environment-variable access.

repo/apps/server/src/services/discover/index.ts:115

      if (process.env.VERCEL_PROJECT_ID) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f3351f745831b1f5 — Environment-variable access.

repo/apps/server/src/services/discover/index.ts:116

        return process.env.VERCEL_PROJECT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2baa4633f6724363 — Environment-variable access.

repo/apps/server/src/services/gateway/GatewayManager.ts:253

      appUrl: process.env.APP_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4bec727b1375ed4f — Environment-variable access.

repo/apps/server/src/services/gateway/index.ts:105

const isVercel = !!process.env.VERCEL_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2f6bc09d2d8fb493 — Filesystem access.

repo/apps/server/src/services/generation/video.ts:74

        fs.readFile(String(tempVideoPath)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #637066eb8a9b1a69 — Filesystem access.

repo/apps/server/src/services/generation/video.ts:99

      const coverBuffer = await fs.readFile(String(tempCoverPath));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #da355bee38c756ab — Environment-variable access.

repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:500

    const originalToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #03229327a69f9369 — Environment-variable access.

repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:501

    const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #de0ffd6ed9b0e404 — Environment-variable access.

repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:537

      process.env.QSTASH_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b2e9ac46457ba9e8 — Environment-variable access.

repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:538

      process.env.APP_URL = 'https://app.test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #67454b0c15c3cc38 — Environment-variable access.

repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:543

      if (originalToken === undefined) delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4775c31b3f83f4e6 — Environment-variable access.

repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:544

      else process.env.QSTASH_TOKEN = originalToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2cb7224785dfab3b — Environment-variable access.

repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:545

      if (originalAppUrl === undefined) delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d3aaa67e137b767b — Environment-variable access.

repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:546

      else process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c89d01d28f7afefa — Environment-variable access.

repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:594

    const originalToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ca5bbce1f172fb17 — Environment-variable access.

repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:595

    const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #6fca3f2a3a7d1a55 — Environment-variable access.

repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:645

      process.env.QSTASH_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b2794055ea125afd — Environment-variable access.

repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:646

      process.env.APP_URL = 'https://app.test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #99b99fce4e86c383 — Environment-variable access.

repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:652

      if (originalToken === undefined) delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #18d4e066a51a615c — Environment-variable access.

repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:653

      else process.env.QSTASH_TOKEN = originalToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #56db265fd20f92fd — Environment-variable access.

repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:654

      if (originalAppUrl === undefined) delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #20f2c8109a294f1f — Environment-variable access.

repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:655

      else process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #20a91efdbd6069e0 — Environment-variable access.

repo/apps/server/src/services/heterogeneousAgent/sandboxRunner.ts:193

  const serverUrl = process.env.LOBEHUB_HETERO_SERVER_URL ?? appEnv.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aa9f5df40a961a26 — Environment-variable access.

repo/apps/server/src/services/llmGenerationTracing/index.ts:262

  if (process.env.ENABLE_LLM_GENERATION_TRACING_S3 === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d818dcfee2cd113d — Environment-variable access.

repo/apps/server/src/services/llmGenerationTracing/index.ts:273

  if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1c65ea8278b28de3 — Environment-variable access.

repo/apps/server/src/services/market/index.ts:13

const MARKET_BASE_URL = process.env.MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e2f23b71c57f5a28 — Environment-variable access.

repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:65

  const originalServiceUserId = process.env.MEMORY_EXTRACTION_HOURLY_TASK_USER_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9b5ba5327e45d1d6 — Environment-variable access.

repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:66

  const originalQstashToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #11ae188787010b6d — Environment-variable access.

repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:73

    process.env.MEMORY_EXTRACTION_HOURLY_TASK_USER_ID = 'service-account-user';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #21e6d61cdfce4876 — Environment-variable access.

repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:74

    process.env.QSTASH_TOKEN = 'test-qstash-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8f0dda148177cb16 — Environment-variable access.

repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:96

      delete process.env.MEMORY_EXTRACTION_HOURLY_TASK_USER_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4905c604a5cb963c — Environment-variable access.

repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:98

      process.env.MEMORY_EXTRACTION_HOURLY_TASK_USER_ID = originalServiceUserId;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f8b3c6fb05c8fbf6 — Environment-variable access.

repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:102

      delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #5992531b67eef34a — Environment-variable access.

repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:104

      process.env.QSTASH_TOKEN = originalQstashToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #89153d72d78bdacd — Environment-variable access.

repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:257

    delete process.env.MEMORY_EXTRACTION_HOURLY_TASK_USER_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b49def71bfd06867 — Environment-variable access.

repo/apps/server/src/services/memory/userMemory/extract.ts:2765

  const token = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ced7a54af52c5825 — Environment-variable access.

repo/apps/server/src/services/memory/userMemory/extract.ts:2770

  if (process.env.QSTASH_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ae1bbb728457aefd — Environment-variable access.

repo/apps/server/src/services/memory/userMemory/extract.ts:2771

    (config as Record<string, unknown>).url = process.env.QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5b561640582fbe11 — Environment-variable access.

repo/apps/server/src/services/memory/userMemory/extract.ts:2844

    const userId = process.env.MEMORY_EXTRACTION_HOURLY_TASK_USER_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #e42168a16e6aafe0 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/apps/server/src/services/messenger/oauth/slackOAuth.ts:29

  const url = new URL(SLACK_AUTHORIZE_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #7252edcd039bd79d — Hardcoded external endpoint. Review what data is sent to this destination.

repo/apps/server/src/services/messenger/platforms/discord/oauth.ts:81

  const url = new URL(DISCORD_AUTHORIZE_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #0d8b2b5ba493aa42 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/apps/server/src/services/messenger/platforms/discord/oauth.ts:108

  const tokenResponse = await fetch(DISCORD_TOKEN_URL, {
    body,
    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
    method: 'POST',
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #c6b79a533b78dfc8 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/apps/server/src/services/messenger/platforms/discord/oauth.ts:132

    const userResponse = await fetch(`${DISCORD_API_BASE}/users/@me`, {
      headers: { Authorization: `Bearer ${data.access_token}` },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #2eb8689d9ad73e8a — Hardcoded external endpoint. Review what data is sent to this destination.

repo/apps/server/src/services/messenger/platforms/slack/oauth.ts:103

  const url = new URL('https://slack.com/app/open');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only #2bd998eb6596c8a6 — Environment-variable access.

repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:128

      delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #19947cc3f310e086 — Environment-variable access.

repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:139

      process.env.QSTASH_TOKEN = 'test-qstash-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #04fc35daf14903a9 — Environment-variable access.

repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:148

      delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #14a458987a4d7a63 — Environment-variable access.

repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:153

      process.env.QSTASH_TOKEN = 'test-qstash-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #047e057b46e2f3b0 — Environment-variable access.

repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:161

      delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #872dc644e979aa23 — Environment-variable access.

repo/apps/server/src/services/queue/impls/index.ts:26

    const qstashToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c510f3f6715585b1 — Environment-variable access.

repo/apps/server/src/services/search/impls/anspire/index.ts:21

    return process.env.ANSPIRE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #549a1aaadc615248 — Environment-variable access.

repo/apps/server/src/services/search/impls/bocha/index.ts:28

    return process.env.BOCHA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #785a94d7386e085b — Environment-variable access.

repo/apps/server/src/services/search/impls/brave/index.test.ts:30

    process.env.BRAVE_API_KEY = 'test-brave-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0abff909c4c25139 — Environment-variable access.

repo/apps/server/src/services/search/impls/brave/index.test.ts:35

    delete process.env.BRAVE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #18c67708e0df6d7a — Environment-variable access.

repo/apps/server/src/services/search/impls/brave/index.test.ts:145

      delete process.env.BRAVE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #238345879c76faa6 — Environment-variable access.

repo/apps/server/src/services/search/impls/brave/index.ts:28

    return process.env.BRAVE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2a68af4aad3fa1af — Environment-variable access.

repo/apps/server/src/services/search/impls/exa/index.test.ts:27

    process.env.EXA_API_KEY = 'test-exa-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #61ca5c5e8f3316a8 — Environment-variable access.

repo/apps/server/src/services/search/impls/exa/index.test.ts:32

    delete process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #75a10c8cc0674308 — Environment-variable access.

repo/apps/server/src/services/search/impls/exa/index.test.ts:153

      delete process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eaebade667f871f1 — Environment-variable access.

repo/apps/server/src/services/search/impls/exa/index.ts:21

    return process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1df29486fc7979e1 — Environment-variable access.

repo/apps/server/src/services/search/impls/firecrawl/index.ts:28

    return process.env.FIRECRAWL_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2f4981376f784bbb — Environment-variable access.

repo/apps/server/src/services/search/impls/firecrawl/index.ts:33

    return process.env.FIRECRAWL_URL || 'https://api.firecrawl.dev/v2';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b4dd046e8121dc72 — Environment-variable access.

repo/apps/server/src/services/search/impls/google/index.ts:28

    return process.env.GOOGLE_PSE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f26cc379446c2e83 — Environment-variable access.

repo/apps/server/src/services/search/impls/google/index.ts:32

    return process.env.GOOGLE_PSE_ENGINE_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #30dd86b0edf4ca23 — Environment-variable access.

repo/apps/server/src/services/search/impls/jina/index.test.ts:21

    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #78b4306f0df44d05 — Environment-variable access.

repo/apps/server/src/services/search/impls/jina/index.test.ts:22

    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fe50bff06c8ba07c — Environment-variable access.

repo/apps/server/src/services/search/impls/jina/index.test.ts:23

    delete process.env.JINA_USE_CN_DOMAINS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1d63d5bb99d161b2 — Environment-variable access.

repo/apps/server/src/services/search/impls/jina/index.test.ts:28

    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3bf75a85cc60f852 — Environment-variable access.

repo/apps/server/src/services/search/impls/jina/index.test.ts:29

    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e865f50a17808455 — Environment-variable access.

repo/apps/server/src/services/search/impls/jina/index.test.ts:30

    delete process.env.JINA_USE_CN_DOMAINS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c4b03a6c154765ef — Environment-variable access.

repo/apps/server/src/services/search/impls/jina/index.test.ts:34

    process.env.JINA_READER_API_KEY = 'test-jina-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #94d20ccb9e62068b — Environment-variable access.

repo/apps/server/src/services/search/impls/jina/index.test.ts:79

    process.env.JINA_USE_CN_DOMAINS = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #414260f84a23c5ac — Environment-variable access.

repo/apps/server/src/services/search/impls/jina/index.ts:22

    return process.env.JINA_READER_API_KEY || process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c79ed1149b28c3ad — Environment-variable access.

repo/apps/server/src/services/search/impls/kagi/index.ts:21

    return process.env.KAGI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f20d97fa1a882111 — Environment-variable access.

repo/apps/server/src/services/search/impls/search1api/index.integration.test.ts:7

const apiKey = process.env.SEARCH1API_SEARCH_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a123e62fab81270f — Environment-variable access.

repo/apps/server/src/services/search/impls/search1api/index.test.ts:39

    process.env.SEARCH1API_SEARCH_API_KEY = 'test-search1api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1b62a10dea7aa34c — Environment-variable access.

repo/apps/server/src/services/search/impls/search1api/index.test.ts:40

    delete process.env.SEARCH1API_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f25903c086247c29 — Environment-variable access.

repo/apps/server/src/services/search/impls/search1api/index.test.ts:45

    delete process.env.SEARCH1API_SEARCH_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ab57b19aaa4e8c0d — Environment-variable access.

repo/apps/server/src/services/search/impls/search1api/index.test.ts:46

    delete process.env.SEARCH1API_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #90ec844a37c65698 — Environment-variable access.

repo/apps/server/src/services/search/impls/search1api/index.ts:41

    return process.env.SEARCH1API_SEARCH_API_KEY || process.env.SEARCH1API_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #214e8b1df77cf920 — Environment-variable access.

repo/apps/server/src/services/search/impls/tavily/index.test.ts:27

    process.env.TAVILY_API_KEY = 'test-tavily-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #31048bc9f88850e8 — Environment-variable access.

repo/apps/server/src/services/search/impls/tavily/index.test.ts:28

    delete process.env.TAVILY_SEARCH_DEPTH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #08fcd133b989a7d4 — Environment-variable access.

repo/apps/server/src/services/search/impls/tavily/index.test.ts:33

    delete process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #52eee69babbf438e — Environment-variable access.

repo/apps/server/src/services/search/impls/tavily/index.test.ts:34

    delete process.env.TAVILY_SEARCH_DEPTH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a3850d753d8ecfb0 — Environment-variable access.

repo/apps/server/src/services/search/impls/tavily/index.test.ts:147

      process.env.TAVILY_SEARCH_DEPTH = 'advanced';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6e9c865e6cf388ec — Environment-variable access.

repo/apps/server/src/services/search/impls/tavily/index.test.ts:170

      delete process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d4da1f5fb5b421c7 — Environment-variable access.

repo/apps/server/src/services/search/impls/tavily/index.ts:21

    return process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #733fd5d0b2fdaa9c — Environment-variable access.

repo/apps/server/src/services/search/impls/tavily/index.ts:40

      search_depth: process.env.TAVILY_SEARCH_DEPTH || 'basic', // basic or advanced

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3e450fd90ed4dcc3 — Filesystem access.

repo/apps/server/src/services/skill/importer.ts:116

      const buffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #068bc055d86dd308 — Filesystem access.

repo/apps/server/src/services/skill/parser.test.ts:825

      await writeFile(testZipPath, zipped);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d3bea09856936fd3 — Filesystem access.

repo/apps/server/src/services/skill/parser.test.ts:851

      await writeFile(invalidZipPath, Buffer.from([1, 2, 3, 4]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1bba6a40fac547a9 — Filesystem access.

repo/apps/server/src/services/skill/parser.ts:61

      const buffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #30b2978100be5762 — Environment-variable access.

repo/apps/server/src/services/taskScheduler/impls/index.ts:24

    const baseUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6a664a453f76053e — Environment-variable access.

repo/apps/server/src/services/taskTemplate/index.ts:23

  process.env.VERCEL_PROJECT_ID || process.env.VERCEL_PROJECT_PRODUCTION_URL || appEnv.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e63dc7606e7881f8 — Environment-variable access.

repo/apps/server/src/services/toolExecution/serverRuntimes/agentDocuments.ts:22

    return process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #edba890d3fe8abe9 — Filesystem access.

repo/apps/server/src/utils/tempFileManager.ts:29

      writeFileSync(filePath, data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ed96cec19c76d88a — Environment-variable access.

repo/apps/server/src/utils/url.test.ts:25

    process.env.VERCEL = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b8dba9756fe25e01 — Environment-variable access.

repo/apps/server/src/utils/url.test.ts:26

    process.env.VERCEL_ENV = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d19d5867e22bcb52 — Environment-variable access.

repo/apps/server/src/utils/url.test.ts:35

    process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a64b47aebaf4405f — Environment-variable access.

repo/apps/server/src/utils/url.test.ts:36

    process.env.VERCEL_ENV = 'preview';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #893131d6050838e5 — Environment-variable access.

repo/apps/server/src/utils/url.test.ts:37

    process.env.VERCEL_URL = 'preview-url.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #69037aa173fb18e3 — Environment-variable access.

repo/apps/server/src/utils/url.test.ts:46

    process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ebd5bcf3c6028bbb — Environment-variable access.

repo/apps/server/src/utils/url.test.ts:47

    process.env.VERCEL_ENV = 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #19289cfaa06e8ee1 — Environment-variable access.

repo/apps/server/src/utils/url.ts:3

const isVercelPreview = process.env.VERCEL === '1' && process.env.VERCEL_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #51365a56d5fae405 — Environment-variable access.

repo/apps/server/src/utils/url.ts:5

const vercelPreviewUrl = `https://${process.env.VERCEL_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #717dbbc6bbf72d99 — Environment-variable access.

repo/apps/server/src/workflows-hono/middlewares/qstashAuth.ts:27

  if (process.env.QSTASH_CURRENT_SIGNING_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f2fda987c21c08d4 — Environment-variable access.

repo/apps/server/src/workflows-hono/qstashClient.ts:13

    token: process.env.QSTASH_TOKEN!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #673521c506a377d9 — Environment-variable access.

repo/apps/server/src/workflows-hono/task/handlers/scheduleDispatch.ts:106

    if (!process.env.APP_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7c89e41a8ae11dea — Environment-variable access.

repo/apps/server/src/workflows-hono/task/handlers/scheduleDispatch.ts:109

    const url = `${process.env.APP_URL.replace(/\/$/, '')}${SCHEDULE_EXECUTE_PATH}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #24eea6875a537a48 — Environment-variable access.

repo/apps/server/src/workflows/agentEvalRun/index.ts:127

  const baseUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0f5bc791718cd26f — Environment-variable access.

repo/apps/server/src/workflows/agentSignal/run.ts:104

  if (process.env.NODE_ENV !== 'development') return null;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #89631c410d6276da — Environment-variable access.

repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:6

  const originalQstashToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e6103de2e3885583 — Environment-variable access.

repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:7

  const originalQstashUrl = process.env.QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c808d5b703d531c9 — Environment-variable access.

repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:10

    process.env.QSTASH_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #58013b6fcd91e65f — Environment-variable access.

repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:11

    delete process.env.QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a009874bcd457d37 — Environment-variable access.

repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:21

    if (originalQstashToken === undefined) delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #61dea0fc32957c26 — Environment-variable access.

repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:22

    else process.env.QSTASH_TOKEN = originalQstashToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #395cbed78cb651bd — Environment-variable access.

repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:24

    if (originalQstashUrl === undefined) delete process.env.QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d9a95e52731456eb — Environment-variable access.

repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:25

    else process.env.QSTASH_URL = originalQstashUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2fe985a237eb2024 — Environment-variable access.

repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:136

    delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #35c317435c5af3ee — Environment-variable access.

repo/apps/server/src/workflows/runGuard/qstashCancel.ts:79

  const token = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #259596abc9ab44f6 — Environment-variable access.

repo/apps/server/src/workflows/runGuard/qstashCancel.ts:83

  const qstashUrl = process.env.QSTASH_URL || DEFAULT_QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #12fd0a3a81385fb7 — Filesystem access.

repo/apps/server/viteNodeServer.config.ts:22

    return `export default ${JSON.stringify(readFileSync(filepath, 'utf8'))};`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/model-runtime

npm first-party

high pii_flow production #e51ce98763b6447d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:49 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:51 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:49

  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #7ebc96081254e374 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:164 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:167 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:164

  const response = await fetch(`${baseURL}/videos`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #5b0ceefad478812e — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/aihubmix/index.ts:181 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/aihubmix/index.ts:163 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/aihubmix/index.ts:181

      const response = await fetch(urlJoin(rootBaseURL, '/api/v1/models'), {
        headers: {
          'Authorization': `Bearer ${apiKey}`,
          'APP-Code': 'LobeHub',
        },
        signal: controller.signal,
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #753165d103c90cb9 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/azureai/index.ts:67 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/azureai/index.ts:33 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/azureai/index.ts:67

      const response = this.client.path('/chat/completions').post({
        body: {
          messages: updatedMessages as OpenAI.ChatCompletionMessageParam[],
          model,
          ...params,
          stream: enableStreaming,
          temperature: model.includes('o3') || model.includes('o4') ? undefined : temperature,
          tool_choice: params.tools ? 'auto' : undefined,
          top_p: model.includes('o3') || model.includes('o4') ? undefined : top_p,
        },
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #cccaae0eeb4278b5 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/bfl/createImage.ts:121 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/bfl/createImage.ts:125 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/bfl/createImage.ts:121

  const response = await fetch(url, {
    body: JSON.stringify(payload),
    headers: {
      'Content-Type': 'application/json',
      'x-key': options.apiKey,
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #a8de90f4b6cf0902 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/bfl/createImage.ts:158 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/bfl/createImage.ts:161 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/bfl/createImage.ts:158

  const response = await fetch(pollingUrl, {
    headers: {
      'accept': 'application/json',
      'x-key': options.apiKey,
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #361324fea932dd23 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/cloudflare/index.ts:93 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/cloudflare/index.ts:77 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/cloudflare/index.ts:93

      response = await fetch(url, {
        body: JSON.stringify({ tools: functions, ...restPayload }),
        headers: { 'Content-Type': 'application/json', ...headers },
        method: 'POST',
        signal: options?.signal,
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #5bc93df861694125 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/cloudflare/index.ts:156 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/cloudflare/index.ts:77 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/cloudflare/index.ts:156

    const response = await fetch(url, {
      headers: {
        'Authorization': `Bearer ${this.apiKey}`,
        'Content-Type': 'application/json',
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #1e2323a2d0217408 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/comfyui/index.ts:101 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/comfyui/index.ts:77 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/comfyui/index.ts:101

      const response = await fetch(`${appUrl}/webapi/create-image/comfyui`, {
        body: JSON.stringify({
          model: payload.model,
          options: this.options,
          params: payload.params,
        }),
        headers,
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #fd422bc9e59ec0f9 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/google/index.ts:471 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/google/index.ts:135 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/google/index.ts:471

      const response = await fetch(url, {
        headers: {
          'x-goog-api-key': this.apiKey!,
        },
        method: 'GET',
        signal: options?.signal,
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #a2de2ef1ecde7ca6 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/minimax/createVideo.ts:53 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:55 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:53

  const response = await fetch(urlWithParams.toString(), {
    headers: {
      Authorization: `Bearer ${options.apiKey}`,
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #6360f53cbd29e927 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/minimax/createVideo.ts:76 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:78 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:76

  const response = await fetch(urlWithParams.toString(), {
    headers: {
      Authorization: `Bearer ${options.apiKey}`,
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #8058511134b964ba — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/minimax/createVideo.ts:174 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:177 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:174

  const response = await fetch(`${baseURL}/video_generation`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #56b78cf0ee90367a — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/nebius/index.ts:31 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/nebius/index.ts:34 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/nebius/index.ts:31

    const res = await fetch(url, {
      headers: {
        Accept: 'application/json',
        Authorization: `Bearer ${client.apiKey}`,
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #6af897b6139b609f — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:38 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:41 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:38

  const response = await fetch(statusUrl, {
    body: JSON.stringify({ requestId }),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #a4b9d9b4cc6cd1e5 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:123 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:126 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:123

  const response = await fetch(`${baseURL}/video/submit`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #10d846082a91b967 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/straico/index.ts:44 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/straico/index.ts:46 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/straico/index.ts:44

    const response = await fetch(url, {
      headers: {
        Authorization: `Bearer ${client.apiKey}`,
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #875cc1041ba58cc8 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:75 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:78 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:75

  const response = await fetch(`${baseURL}/contents/generations/tasks`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #d617edf78b815f9b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:35 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:37 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:35

  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #74c05728c94837c3 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:134 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:137 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:134

  const response = await fetch(`${baseURL}/video/generations`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #87984fcc49e7dd73 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/xai/createVideo.ts:33 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/xai/createVideo.ts:35 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/xai/createVideo.ts:33

  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #0ac8dfaa0a37ef07 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/xai/createVideo.ts:124 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/xai/createVideo.ts:127 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/xai/createVideo.ts:124

  const response = await fetch(`${baseURL}/videos/generations`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #0ee887a30f46042b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/zhipu/createImage.ts:37 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/zhipu/createImage.ts:39 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/zhipu/createImage.ts:37

  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #d53e74497f40284b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/zhipu/createImage.ts:131 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/zhipu/createImage.ts:134 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/zhipu/createImage.ts:131

  const response = await fetch(endpoint, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #dbb481993b6406ee — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:39 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:41 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:39

  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #dd9b32bdd66a85ce — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:144 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:147 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:144

  const response = await fetch(`${baseURL}/videos/generations`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #6ff7f352696d2031 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/model-runtime/src/providers/zhipu/index.ts:220 · flow /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/zhipu/index.ts:222 → /tmp/closeopen-c0i_3jq8/repo/packages/model-runtime/src/providers/zhipu/index.ts:220

    const response = await fetch(url, {
      headers: {
        'Authorization': `Bearer ${client.apiKey}`,
        'Bigmodel-Organization': 'lobehub',
        'Bigmodel-Project': 'lobechat',
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

expand_more 382 low-confidence finding(s)

low env_fs production #6adca25ee34a34a3 — Environment-variable access.

repo/packages/model-runtime/src/core/RouterRuntime/createRuntime.ts:265

      if (process.env.NODE_ENV !== 'development') return effectiveUserId;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #40f7f25113c0f1d7 — Environment-variable access.

repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:25

const originalAnthropicClientTimeout = process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cf904fe077520560 — Environment-variable access.

repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:29

    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #47c3e32023dd1c8d — Environment-variable access.

repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:31

    process.env.ANTHROPIC_CLIENT_TIMEOUT = originalAnthropicClientTimeout;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3ec51370c012fff0 — Environment-variable access.

repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:68

    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #33587eee6f119af8 — Environment-variable access.

repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:81

    process.env.ANTHROPIC_CLIENT_TIMEOUT = '780000';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c2b531a825a667dd — Environment-variable access.

repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:91

    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0a94f70be61d6135 — Environment-variable access.

repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:96

    process.env.ANTHROPIC_CLIENT_TIMEOUT = 'invalid';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #18520ee162438697 — Environment-variable access.

repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:106

    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bc2e0a59495f3b91 — Environment-variable access.

repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:111

    process.env.ANTHROPIC_CLIENT_TIMEOUT = '780000';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #86258c5e90280813 — Environment-variable access.

repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:124

    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1a73a1b5276ed3d8 — Environment-variable access.

repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.ts:66

  const timeout = Number(process.env[ANTHROPIC_CLIENT_TIMEOUT_ENV]);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #479dc7872e180b91 — Environment-variable access.

repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.ts:275

  const betaHeaders = process.env.ANTHROPIC_BETA_HEADERS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2cd8c2f81c7390b0 — Environment-variable access.

repo/packages/model-runtime/src/core/contextBuilders/anthropic.ts:479

  const maxUses = process.env.ANTHROPIC_MAX_USES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #415542a409229007 — Environment-variable access.

repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:39

    process.env.LLM_VISION_IMAGE_USE_BASE64 = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5942284399cb2b4d — Environment-variable access.

repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:64

    process.env.LLM_VISION_IMAGE_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a96d4d81821888ee — Environment-variable access.

repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:80

    process.env.LLM_VISION_IMAGE_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #67e9ea76aff8cc3e — Environment-variable access.

repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:104

    process.env.LLM_VISION_VIDEO_USE_BASE64 = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1f9fa0f8617a9f49 — Environment-variable access.

repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:127

    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0c8ce11cce77003d — Environment-variable access.

repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:131

    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ac838cff6fdc9d42 — Environment-variable access.

repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:147

    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #de95fdfc5c768687 — Environment-variable access.

repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:171

    process.env.LLM_VISION_VIDEO_USE_BASE64 = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8faf4018a66efbfd — Environment-variable access.

repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:185

    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #594164106829c40f — Environment-variable access.

repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:219

    process.env.LLM_VISION_IMAGE_USE_BASE64 = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #88e51597e42ad0c0 — Environment-variable access.

repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:238

    process.env.LLM_VISION_IMAGE_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d12d5f104e0425b9 — Environment-variable access.

repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:1055

    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #27d1b118cd76a87b — Environment-variable access.

repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:1097

    process.env.LLM_VISION_IMAGE_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aa54c8b2355ba30c — Environment-variable access.

repo/packages/model-runtime/src/core/contextBuilders/openai.ts:43

      options?.forceImageBase64 || process.env.LLM_VISION_IMAGE_USE_BASE64 === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #204e6705bfba51f4 — Environment-variable access.

repo/packages/model-runtime/src/core/contextBuilders/openai.ts:59

      options?.forceVideoBase64 || process.env.LLM_VISION_VIDEO_USE_BASE64 === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3b8ce72e01d2365f — Environment-variable access.

repo/packages/model-runtime/src/core/openaiCompatibleFactory/index.test.ts:43

    chatCompletion: () => process.env.DEBUG_MOCKPROVIDER_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #582c928b1deed927 — Environment-variable access.

repo/packages/model-runtime/src/core/openaiCompatibleFactory/index.test.ts:1664

        const originalDebugValue = process.env.DEBUG_MOCKPROVIDER_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4516b44342082fee — Environment-variable access.

repo/packages/model-runtime/src/core/openaiCompatibleFactory/index.test.ts:1667

        process.env.DEBUG_MOCKPROVIDER_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1036d6b326a4747b — Environment-variable access.

repo/packages/model-runtime/src/core/openaiCompatibleFactory/index.test.ts:1683

        process.env.DEBUG_MOCKPROVIDER_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fb429ff72709c38e — Environment-variable access.

repo/packages/model-runtime/src/providerTestUtils.ts:338

          const originalDebugValue = process.env[debugEnv];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4b0f8af6e5d07b38 — Environment-variable access.

repo/packages/model-runtime/src/providerTestUtils.ts:340

          process.env[debugEnv] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2bef969550d1f62a — Environment-variable access.

repo/packages/model-runtime/src/providerTestUtils.ts:356

          process.env[debugEnv] = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5847ddfe92a0e204 — Environment-variable access.

repo/packages/model-runtime/src/providers/ai21/index.ts:16

    chatCompletion: () => process.env.DEBUG_AI21_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9fc0955d521b5f0f — Environment-variable access.

repo/packages/model-runtime/src/providers/ai302/index.ts:36

    chatCompletion: () => process.env.DEBUG_AI302_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c17923b9385e0688 — Environment-variable access.

repo/packages/model-runtime/src/providers/ai360/index.test.ts:34

      delete process.env.DEBUG_AI360_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #89acd82f5080a92b — Environment-variable access.

repo/packages/model-runtime/src/providers/ai360/index.test.ts:40

      process.env.DEBUG_AI360_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9efcbee1319def21 — Environment-variable access.

repo/packages/model-runtime/src/providers/ai360/index.test.ts:43

      delete process.env.DEBUG_AI360_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #61faa562ad1faf1d — Environment-variable access.

repo/packages/model-runtime/src/providers/ai360/index.test.ts:47

      process.env.DEBUG_AI360_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #86027818d11a488f — Environment-variable access.

repo/packages/model-runtime/src/providers/ai360/index.test.ts:50

      delete process.env.DEBUG_AI360_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8e48f33fd38a99f0 — Environment-variable access.

repo/packages/model-runtime/src/providers/ai360/index.ts:39

    chatCompletion: () => process.env.DEBUG_AI360_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #84092e561d5dd392 — Environment-variable access.

repo/packages/model-runtime/src/providers/aihubmix/index.ts:156

    chatCompletion: () => process.env.DEBUG_AIHUBMIX_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1b6ebaa2e9663fff — Environment-variable access.

repo/packages/model-runtime/src/providers/akashchat/index.test.ts:68

      delete process.env.DEBUG_AKASH_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f5cb70dc004068c3 — Environment-variable access.

repo/packages/model-runtime/src/providers/akashchat/index.test.ts:74

      process.env.DEBUG_AKASH_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b49e52017832019c — Environment-variable access.

repo/packages/model-runtime/src/providers/akashchat/index.test.ts:77

      delete process.env.DEBUG_AKASH_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bd9aa8c289e38ce9 — Environment-variable access.

repo/packages/model-runtime/src/providers/akashchat/index.test.ts:81

      process.env.DEBUG_AKASH_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e4326f63c59e1ec8 — Environment-variable access.

repo/packages/model-runtime/src/providers/akashchat/index.test.ts:84

      delete process.env.DEBUG_AKASH_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fc97d4c30c7d6dd1 — Environment-variable access.

repo/packages/model-runtime/src/providers/akashchat/index.ts:36

    chatCompletion: () => process.env.DEBUG_AKASH_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6cdc9b06408d61b2 — Environment-variable access.

repo/packages/model-runtime/src/providers/antgroup/index.ts:22

    chatCompletion: () => process.env.DEBUG_ANTGROUP_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dabd4c5bc7ae51e3 — Environment-variable access.

repo/packages/model-runtime/src/providers/anthropic/index.test.ts:262

      const originalDebugValue = process.env.DEBUG_ANTHROPIC_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ac5fae8abb604f65 — Environment-variable access.

repo/packages/model-runtime/src/providers/anthropic/index.test.ts:264

      process.env.DEBUG_ANTHROPIC_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8afbe3ec0a2f1dd8 — Environment-variable access.

repo/packages/model-runtime/src/providers/anthropic/index.test.ts:278

      process.env.DEBUG_ANTHROPIC_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e92592d95f272e6f — Environment-variable access.

repo/packages/model-runtime/src/providers/anthropic/index.ts:23

    chatCompletion: () => process.env.DEBUG_ANTHROPIC_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea1c3c825ab7675d — Environment-variable access.

repo/packages/model-runtime/src/providers/azureOpenai/index.test.ts:436

        process.env.DEBUG_AZURE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e2aeec864dd1d1d8 — Environment-variable access.

repo/packages/model-runtime/src/providers/azureOpenai/index.test.ts:451

        delete process.env.DEBUG_AZURE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b95ef551f19a599d — Environment-variable access.

repo/packages/model-runtime/src/providers/azureOpenai/index.ts:19

const azureSearchContextSize = process.env.OPENAI_SEARCH_CONTEXT_SIZE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aec8b8efdd2027f7 — Environment-variable access.

repo/packages/model-runtime/src/providers/azureOpenai/index.ts:141

    chatCompletion: () => process.env.DEBUG_AZURE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c5ae6ad9581fd03e — Environment-variable access.

repo/packages/model-runtime/src/providers/azureOpenai/index.ts:142

    responses: () => process.env.DEBUG_AZURE_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f1640f66fb16060e — Environment-variable access.

repo/packages/model-runtime/src/providers/azureai/index.ts:115

        if (process.env.DEBUG_AZURE_AI_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ac3ffc1a1673711e — Environment-variable access.

repo/packages/model-runtime/src/providers/baichuan/index.test.ts:45

      delete process.env.DEBUG_BAICHUAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6d2aad14cef00db5 — Environment-variable access.

repo/packages/model-runtime/src/providers/baichuan/index.test.ts:51

      process.env.DEBUG_BAICHUAN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e02d77c63639ba6f — Environment-variable access.

repo/packages/model-runtime/src/providers/baichuan/index.test.ts:54

      delete process.env.DEBUG_BAICHUAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7914372d2de4394b — Environment-variable access.

repo/packages/model-runtime/src/providers/baichuan/index.test.ts:110

      delete process.env.BAICHUAN_SEARCH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a598a050f887c39d — Environment-variable access.

repo/packages/model-runtime/src/providers/baichuan/index.test.ts:124

      process.env.BAICHUAN_SEARCH_MODE = 'quality_first';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #29c4e2db092c963f — Environment-variable access.

repo/packages/model-runtime/src/providers/baichuan/index.test.ts:136

      delete process.env.BAICHUAN_SEARCH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8d37b7726f320c66 — Environment-variable access.

repo/packages/model-runtime/src/providers/baichuan/index.ts:30

                search_mode: process.env.BAICHUAN_SEARCH_MODE || 'performance_first', // performance_first or quality_first

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c5f610057b11af58 — Environment-variable access.

repo/packages/model-runtime/src/providers/baichuan/index.ts:56

    chatCompletion: () => process.env.DEBUG_BAICHUAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #41ea0e803fce6a86 — Environment-variable access.

repo/packages/model-runtime/src/providers/bailianCodingPlan/index.ts:45

    chatCompletion: () => process.env.DEBUG_BAILIAN_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6d4c95c89d9bb03b — Environment-variable access.

repo/packages/model-runtime/src/providers/bedrock/index.test.ts:569

        process.env.DEBUG_BEDROCK_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4d8ce81d51b287d6 — Environment-variable access.

repo/packages/model-runtime/src/providers/bedrock/index.test.ts:583

        delete process.env.DEBUG_BEDROCK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #83b872ae7bd4d8f8 — Environment-variable access.

repo/packages/model-runtime/src/providers/bedrock/index.test.ts:973

        process.env.DEBUG_BEDROCK_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #188ef2ec80901011 — Environment-variable access.

repo/packages/model-runtime/src/providers/bedrock/index.test.ts:987

        delete process.env.DEBUG_BEDROCK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6729119b51915ebd — Environment-variable access.

repo/packages/model-runtime/src/providers/bedrock/index.ts:372

      if (process.env.DEBUG_BEDROCK_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a0ff88104d851166 — Environment-variable access.

repo/packages/model-runtime/src/providers/bedrock/index.ts:433

      if (process.env.DEBUG_BEDROCK_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4e1135007b5108c5 — Environment-variable access.

repo/packages/model-runtime/src/providers/cerebras/index.test.ts:66

      delete process.env.DEBUG_CEREBRAS_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e448c1a8d8534f60 — Environment-variable access.

repo/packages/model-runtime/src/providers/cerebras/index.test.ts:72

      process.env.DEBUG_CEREBRAS_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #32c9e25925174eee — Environment-variable access.

repo/packages/model-runtime/src/providers/cerebras/index.test.ts:78

      process.env.DEBUG_CEREBRAS_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #57f747615034b341 — Environment-variable access.

repo/packages/model-runtime/src/providers/cerebras/index.test.ts:84

      process.env.DEBUG_CEREBRAS_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b2d486c4058d6dfa — Environment-variable access.

repo/packages/model-runtime/src/providers/cerebras/index.ts:25

    chatCompletion: () => process.env.DEBUG_CEREBRAS_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8db54c300c4163e9 — Environment-variable access.

repo/packages/model-runtime/src/providers/cloudflare/index.test.ts:255

      const originalDebugValue = process.env.DEBUG_CLOUDFLARE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #32358ce84ad77a79 — Environment-variable access.

repo/packages/model-runtime/src/providers/cloudflare/index.test.ts:257

      process.env.DEBUG_CLOUDFLARE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #165b8cce979750b2 — Environment-variable access.

repo/packages/model-runtime/src/providers/cloudflare/index.test.ts:271

      process.env.DEBUG_CLOUDFLARE_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #06c8149b41bee0f1 — Environment-variable access.

repo/packages/model-runtime/src/providers/cloudflare/index.ts:136

    if (process.env.DEBUG_CLOUDFLARE_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4798b95ed5e1a9e9 — Environment-variable access.

repo/packages/model-runtime/src/providers/cohere/index.test.ts:44

      delete process.env.DEBUG_COHERE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #04fa2be8b76ce14b — Environment-variable access.

repo/packages/model-runtime/src/providers/cohere/index.test.ts:50

      process.env.DEBUG_COHERE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #50f87093de8e3000 — Environment-variable access.

repo/packages/model-runtime/src/providers/cohere/index.test.ts:53

      delete process.env.DEBUG_COHERE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c465f28812c3c7ee — Environment-variable access.

repo/packages/model-runtime/src/providers/cohere/index.ts:42

    chatCompletion: () => process.env.DEBUG_COHERE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c0472873a53ba707 — Environment-variable access.

repo/packages/model-runtime/src/providers/cometapi/index.test.ts:49

      delete process.env.DEBUG_COMETAPI_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #22a60ed3961a71c7 — Environment-variable access.

repo/packages/model-runtime/src/providers/cometapi/index.test.ts:55

      process.env.DEBUG_COMETAPI_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9ab4335389741863 — Environment-variable access.

repo/packages/model-runtime/src/providers/cometapi/index.test.ts:58

      delete process.env.DEBUG_COMETAPI_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3a8b28d51c2e57ae — Environment-variable access.

repo/packages/model-runtime/src/providers/cometapi/index.ts:27

    chatCompletion: () => process.env.DEBUG_COMETAPI_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #904321bcac9d87a7 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:49

      const originalEnv = process.env.COMFYUI_DEFAULT_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #edd9b7dd3fccb06e — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:50

      process.env.COMFYUI_DEFAULT_URL = 'https://env.comfyui.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8f22d495cab669d9 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:58

        delete process.env.COMFYUI_DEFAULT_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d878c34fb9830413 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:60

        process.env.COMFYUI_DEFAULT_URL = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #95f6d79ab3157185 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:202

      const originalInternalAppUrl = process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2d2db36f0069a688 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:203

      const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #927ca2c64d2a02d1 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:204

      delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e25c2538fb861452 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:205

      process.env.APP_URL = 'http://localhost:3010';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2b70ad86e22b009d — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:237

        delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #820b7d07260fbe83 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:239

        process.env.INTERNAL_APP_URL = originalInternalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2875a747c6f2870d — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:242

        delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #912fd878e2144661 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:244

        process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #508ecaaac7acaa0e — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:261

      const originalInternalAppUrl = process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #7a3afd9a22b40eea — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:262

      const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #741b2bdbe6dec336 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:263

      process.env.INTERNAL_APP_URL = 'http://internal-service:3210';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8d8a2fd7c5b11758 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:264

      process.env.APP_URL = 'https://public.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #73880de6136a6faf — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:274

        delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c538c542393259d1 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:276

        process.env.INTERNAL_APP_URL = originalInternalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #06533a6b07403620 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:279

        delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #835563166bd110b0 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:281

        process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e305f48478860eef — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:300

      const originalInternalAppUrl = process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #dcae7c6e0f945613 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:301

      const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4cf0bf3621314c0a — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:302

      const originalPort = process.env.PORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c37470066fb8eae2 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:303

      delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2664a405bea54a9b — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:304

      delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c6022196446f7c7f — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:305

      process.env.PORT = '3000';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f4850c801e70b7f2 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:317

        process.env.INTERNAL_APP_URL = originalInternalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d0d3e5afe047b150 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:320

        process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #47cef66e1e6a1550 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:323

        delete process.env.PORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f5f9ff3d2bd3160c — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:325

        process.env.PORT = originalPort;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8e01e95dcb8f0dce — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:344

      const originalInternalAppUrl = process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #6030213ca8e4f4c8 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:345

      const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #49ba466fbef9c53c — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:346

      const originalPort = process.env.PORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a8e31230670caf83 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:347

      delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #513202b49c321955 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:348

      delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ab6131aec71fea9e — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:349

      delete process.env.PORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b1403cb66966e140 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:361

        process.env.INTERNAL_APP_URL = originalInternalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4be185f5d4d11193 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:364

        process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f4065651446592af — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:367

        process.env.PORT = originalPort;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #451d08043f4dfc3f — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/index.ts:28

    this.baseURL = options.baseURL || process.env.COMFYUI_DEFAULT_URL || 'http://localhost:8188';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6538aab35db59315 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/index.ts:76

      const isInVercel = process.env.VERCEL === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b6e25168e0389d46 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/index.ts:77

      const vercelUrl = `https://${process.env.VERCEL_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cc05d27d30c14bb6 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/index.ts:79

        process.env.INTERNAL_APP_URL ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a73de4c31fe7d069 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/index.ts:80

        process.env.APP_URL ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #abda1fc77d9182dd — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/index.ts:81

        (isInVercel ? vercelUrl : `http://localhost:${process.env.PORT || 3010}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c2e7ec4d87f5ef64 — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/index.ts:90

      if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #86aeff1a847abe7b — Environment-variable access.

repo/packages/model-runtime/src/providers/comfyui/index.ts:96

      const keyVaultSecret = process.env.KEY_VAULTS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #33fa592c44756fe9 — Environment-variable access.

repo/packages/model-runtime/src/providers/deepseek/__tests__/index.test.ts:158

    delete process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #40c89d56485ad456 — Environment-variable access.

repo/packages/model-runtime/src/providers/deepseek/__tests__/index.test.ts:164

    process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c621c43cb4c3c456 — Environment-variable access.

repo/packages/model-runtime/src/providers/deepseek/__tests__/index.test.ts:167

    delete process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ff28e7883159a35e — Environment-variable access.

repo/packages/model-runtime/src/providers/deepseek/index.ts:46

    chatCompletion: () => process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #abb5e3a5c8b41081 — Environment-variable access.

repo/packages/model-runtime/src/providers/deepseek/index.ts:64

    chatCompletion: () => process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8997db3b91afac99 — Environment-variable access.

repo/packages/model-runtime/src/providers/fireworksai/index.test.ts:40

      delete process.env.DEBUG_FIREWORKSAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5bb016636043b4a5 — Environment-variable access.

repo/packages/model-runtime/src/providers/fireworksai/index.test.ts:44

      process.env.DEBUG_FIREWORKSAI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fa9fe34a3b659253 — Environment-variable access.

repo/packages/model-runtime/src/providers/fireworksai/index.test.ts:48

      delete process.env.DEBUG_FIREWORKSAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9fad80c72227a4d9 — Environment-variable access.

repo/packages/model-runtime/src/providers/fireworksai/index.ts:17

    chatCompletion: () => process.env.DEBUG_FIREWORKSAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #01157d470c2e89ef — Environment-variable access.

repo/packages/model-runtime/src/providers/giteeai/index.test.ts:55

      delete process.env.DEBUG_GITEE_AI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f3252c4bc877f1a7 — Environment-variable access.

repo/packages/model-runtime/src/providers/giteeai/index.test.ts:61

      process.env.DEBUG_GITEE_AI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5a7c89432fbbd99f — Environment-variable access.

repo/packages/model-runtime/src/providers/giteeai/index.test.ts:67

      process.env.DEBUG_GITEE_AI_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b666ca036d359b90 — Environment-variable access.

repo/packages/model-runtime/src/providers/giteeai/index.test.ts:73

      process.env.DEBUG_GITEE_AI_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c95d3348b207a510 — Environment-variable access.

repo/packages/model-runtime/src/providers/giteeai/index.ts:14

    chatCompletion: () => process.env.DEBUG_GITEE_AI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0c7dfb1f3a2e68ce — Environment-variable access.

repo/packages/model-runtime/src/providers/github/index.test.ts:48

      delete process.env.DEBUG_GITHUB_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #52a445deb8e0740c — Environment-variable access.

repo/packages/model-runtime/src/providers/github/index.test.ts:54

      process.env.DEBUG_GITHUB_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8c2debdad0a3b8e2 — Environment-variable access.

repo/packages/model-runtime/src/providers/github/index.test.ts:57

      delete process.env.DEBUG_GITHUB_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a78a58f17ab0333f — Environment-variable access.

repo/packages/model-runtime/src/providers/github/index.test.ts:61

      process.env.DEBUG_GITHUB_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dbc5218854a99004 — Environment-variable access.

repo/packages/model-runtime/src/providers/github/index.test.ts:64

      delete process.env.DEBUG_GITHUB_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #35709bb2de006e28 — Environment-variable access.

repo/packages/model-runtime/src/providers/github/index.ts:47

    chatCompletion: () => process.env.DEBUG_GITHUB_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #441642799dabaa7a — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/model-runtime/src/providers/github/index.ts:54

    const response = await fetch('https://models.github.ai/catalog/models');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #98dc8c70e38ab128 — Environment-variable access.

repo/packages/model-runtime/src/providers/githubCopilot/index.test.ts:389

      process.env.DEBUG_GITHUBCOPILOT_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7c393f3c05001cb4 — Environment-variable access.

repo/packages/model-runtime/src/providers/githubCopilot/index.test.ts:411

      delete process.env.DEBUG_GITHUBCOPILOT_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8a405d51a4a18b85 — Environment-variable access.

repo/packages/model-runtime/src/providers/githubCopilot/index.test.ts:436

      process.env.DEBUG_GITHUBCOPILOT_RESPONSES = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ad740a960334951d — Environment-variable access.

repo/packages/model-runtime/src/providers/githubCopilot/index.test.ts:458

      delete process.env.DEBUG_GITHUBCOPILOT_RESPONSES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #02c3d094b5944bec — Environment-variable access.

repo/packages/model-runtime/src/providers/githubCopilot/index.ts:32

  chatCompletion: () => process.env.DEBUG_GITHUBCOPILOT_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a5d86a2c65cf87b3 — Environment-variable access.

repo/packages/model-runtime/src/providers/githubCopilot/index.ts:33

  responses: () => process.env.DEBUG_GITHUBCOPILOT_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #63d321101a475755 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/model-runtime/src/providers/githubCopilot/index.ts:79

    const response = await fetch(TOKEN_EXCHANGE_URL, {
      headers: {
        'Accept': 'application/json',
        'Authorization': `Token ${githubToken}`,
        'User-Agent': 'LobeChat/1.0',
      },
      method: 'GET',
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #21f8375e3b26d233 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/model-runtime/src/providers/githubCopilot/index.ts:402

        const response = await fetch(`${COPILOT_BASE_URL}/models`, {
          headers: {
            'Accept': 'application/json',
            'Authorization': `Bearer ${bearerToken}`,
            'Copilot-Integration-Id': 'vscode-chat',
            'Editor-Plugin-Version': 'LobeChat/1.0',
            'Editor-Version': 'LobeChat/1.0',
          },
          method: 'GET',
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #4171bc4677a1393f — Environment-variable access.

repo/packages/model-runtime/src/providers/glmCodingPlan/index.ts:28

    chatCompletion: () => process.env.DEBUG_GLM_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ec56f91bd9b0436e — Environment-variable access.

repo/packages/model-runtime/src/providers/google/index.test.ts:163

      process.env.DEBUG_GOOGLE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1f3912659196902d — Environment-variable access.

repo/packages/model-runtime/src/providers/google/index.test.ts:188

      delete process.env.DEBUG_GOOGLE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #65620917c6b89fb9 — Environment-variable access.

repo/packages/model-runtime/src/providers/google/index.ts:230

      if (process.env[key] === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1e7cb770c9b69c64 — Environment-variable access.

repo/packages/model-runtime/src/providers/google/index.ts:240

      if (process.env[key] === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d183d3757b2cf482 — Environment-variable access.

repo/packages/model-runtime/src/providers/groq/index.test.ts:487

      delete process.env.DEBUG_GROQ_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #536cfd3361877cdd — Environment-variable access.

repo/packages/model-runtime/src/providers/groq/index.test.ts:493

      process.env.DEBUG_GROQ_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dd44445691bc0950 — Environment-variable access.

repo/packages/model-runtime/src/providers/groq/index.test.ts:496

      delete process.env.DEBUG_GROQ_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a6f4217d2debf831 — Environment-variable access.

repo/packages/model-runtime/src/providers/groq/index.ts:82

    chatCompletion: () => process.env.DEBUG_GROQ_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ba5ff464584cda18 — Environment-variable access.

repo/packages/model-runtime/src/providers/higress/index.ts:27

    chatCompletion: () => process.env.DEBUG_HIGRESS_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #90c97e79f5aa4d3c — Environment-variable access.

repo/packages/model-runtime/src/providers/huggingface/index.test.ts:78

      delete process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4f6694c4c95c87b5 — Environment-variable access.

repo/packages/model-runtime/src/providers/huggingface/index.test.ts:84

      process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ad5e0c0caa5c0063 — Environment-variable access.

repo/packages/model-runtime/src/providers/huggingface/index.test.ts:87

      delete process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0f37bcb1c86c29c6 — Environment-variable access.

repo/packages/model-runtime/src/providers/huggingface/index.test.ts:91

      process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9260ba47244195b6 — Environment-variable access.

repo/packages/model-runtime/src/providers/huggingface/index.test.ts:94

      delete process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #df6110d8927aa4b8 — Environment-variable access.

repo/packages/model-runtime/src/providers/huggingface/index.ts:54

    chatCompletion: () => process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #105ca9483bfac47b — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/model-runtime/src/providers/huggingface/index.ts:57

    const response = await fetch('https://router.huggingface.co/v1/models');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #885c563210290f3d — Environment-variable access.

repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:51

      delete process.env.DEBUG_HUNYUAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #560e64762fa507e6 — Environment-variable access.

repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:57

      process.env.DEBUG_HUNYUAN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d01482eb000e07b5 — Environment-variable access.

repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:60

      delete process.env.DEBUG_HUNYUAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4588b321486ef6dd — Environment-variable access.

repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:144

      process.env.HUNYUAN_ENABLE_SPEED_SEARCH = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cce7d97484aa5b7a — Environment-variable access.

repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:156

      delete process.env.HUNYUAN_ENABLE_SPEED_SEARCH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #89c3f016168beacc — Environment-variable access.

repo/packages/model-runtime/src/providers/hunyuan/index.ts:56

          enable_speed_search: process.env.HUNYUAN_ENABLE_SPEED_SEARCH === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ade9e54d62188ab9 — Environment-variable access.

repo/packages/model-runtime/src/providers/hunyuan/index.ts:69

    chatCompletion: () => process.env.DEBUG_HUNYUAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c00e7d400bea7ec9 — Environment-variable access.

repo/packages/model-runtime/src/providers/infiniai/index.ts:24

    chatCompletion: () => process.env.DEBUG_INFINIAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #214427e0fd325dbd — Environment-variable access.

repo/packages/model-runtime/src/providers/internlm/index.test.ts:43

      delete process.env.DEBUG_INTERNLM_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #706425abcddc572b — Environment-variable access.

repo/packages/model-runtime/src/providers/internlm/index.test.ts:49

      process.env.DEBUG_INTERNLM_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cc2c4b90aa48e979 — Environment-variable access.

repo/packages/model-runtime/src/providers/internlm/index.test.ts:52

      delete process.env.DEBUG_INTERNLM_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f9c884b6305d37e8 — Environment-variable access.

repo/packages/model-runtime/src/providers/internlm/index.ts:26

    chatCompletion: () => process.env.DEBUG_INTERNLM_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #78550f948af19b48 — Environment-variable access.

repo/packages/model-runtime/src/providers/jina/index.test.ts:40

      delete process.env.DEBUG_JINA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e94b303ec670e4ea — Environment-variable access.

repo/packages/model-runtime/src/providers/jina/index.test.ts:44

      process.env.DEBUG_JINA_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e171cac91c1047f2 — Environment-variable access.

repo/packages/model-runtime/src/providers/jina/index.test.ts:48

      delete process.env.DEBUG_JINA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a99602737db1e38b — Environment-variable access.

repo/packages/model-runtime/src/providers/jina/index.ts:14

    chatCompletion: () => process.env.DEBUG_JINA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #924bc4bb680a29e9 — Environment-variable access.

repo/packages/model-runtime/src/providers/kimiCodingPlan/index.test.ts:549

      const originalDebugValue = process.env.DEBUG_KIMI_CODING_PLAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8728092ad92a917d — Environment-variable access.

repo/packages/model-runtime/src/providers/kimiCodingPlan/index.test.ts:551

      process.env.DEBUG_KIMI_CODING_PLAN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fb625b00a54d1c75 — Environment-variable access.

repo/packages/model-runtime/src/providers/kimiCodingPlan/index.test.ts:565

      process.env.DEBUG_KIMI_CODING_PLAN_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ae5c5b649a5b10f5 — Environment-variable access.

repo/packages/model-runtime/src/providers/kimiCodingPlan/index.ts:105

    chatCompletion: () => process.env.DEBUG_KIMI_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #10075f4f28d5e4b1 — Environment-variable access.

repo/packages/model-runtime/src/providers/lmstudio/index.test.ts:47

      delete process.env.DEBUG_LMSTUDIO_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a40b4d3148859dc8 — Environment-variable access.

repo/packages/model-runtime/src/providers/lmstudio/index.test.ts:52

      process.env.DEBUG_LMSTUDIO_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fe76f8c3c13b3e6a — Environment-variable access.

repo/packages/model-runtime/src/providers/lmstudio/index.test.ts:54

      delete process.env.DEBUG_LMSTUDIO_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e2b3ea6da1562398 — Environment-variable access.

repo/packages/model-runtime/src/providers/lmstudio/index.ts:15

    chatCompletion: () => process.env.DEBUG_LMSTUDIO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #345ca8debd01f8db — Environment-variable access.

repo/packages/model-runtime/src/providers/longcat/index.ts:30

    chatCompletion: () => process.env.DEBUG_LONGCAT_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #62b12c762a4d1d05 — Environment-variable access.

repo/packages/model-runtime/src/providers/minimax/index.ts:298

    chatCompletion: () => process.env.DEBUG_MINIMAX_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5bfc9754a80eca0c — Environment-variable access.

repo/packages/model-runtime/src/providers/minimax/index.ts:319

    chatCompletion: () => process.env.DEBUG_MINIMAX_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #785c5c759489ab6c — Environment-variable access.

repo/packages/model-runtime/src/providers/minimaxCodingPlan/index.ts:28

    chatCompletion: () => process.env.DEBUG_MINIMAX_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0da589ea5c6e1f19 — Environment-variable access.

repo/packages/model-runtime/src/providers/mistral/index.test.ts:39

      delete process.env.DEBUG_MISTRAL_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #41ad0eecfafb0f5c — Environment-variable access.

repo/packages/model-runtime/src/providers/mistral/index.test.ts:45

      process.env.DEBUG_MISTRAL_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #81f56a5a01d926b6 — Environment-variable access.

repo/packages/model-runtime/src/providers/mistral/index.test.ts:48

      delete process.env.DEBUG_MISTRAL_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #89545eaeb79e2486 — Environment-variable access.

repo/packages/model-runtime/src/providers/mistral/index.ts:59

    chatCompletion: () => process.env.DEBUG_MISTRAL_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d2be65dd629046b3 — Environment-variable access.

repo/packages/model-runtime/src/providers/modelscope/index.test.ts:44

      delete process.env.DEBUG_MODELSCOPE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #93d21a6bd717bfd1 — Environment-variable access.

repo/packages/model-runtime/src/providers/modelscope/index.test.ts:50

      process.env.DEBUG_MODELSCOPE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6e685f374d278f34 — Environment-variable access.

repo/packages/model-runtime/src/providers/modelscope/index.test.ts:56

      process.env.DEBUG_MODELSCOPE_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9088928cc5edde70 — Environment-variable access.

repo/packages/model-runtime/src/providers/modelscope/index.ts:17

    chatCompletion: () => process.env.DEBUG_MODELSCOPE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ed46723ce81962d2 — Environment-variable access.

repo/packages/model-runtime/src/providers/moonshot/index.test.ts:140

      delete process.env.DEBUG_MOONSHOT_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ae9854b31255d783 — Environment-variable access.

repo/packages/model-runtime/src/providers/moonshot/index.test.ts:146

      process.env.DEBUG_MOONSHOT_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7b7c691687f20972 — Environment-variable access.

repo/packages/model-runtime/src/providers/moonshot/index.test.ts:149

      delete process.env.DEBUG_MOONSHOT_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5d90115102e6720b — Environment-variable access.

repo/packages/model-runtime/src/providers/moonshot/index.ts:258

    chatCompletion: () => process.env.DEBUG_MOONSHOT_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #80ac6fb149fcbfa4 — Environment-variable access.

repo/packages/model-runtime/src/providers/moonshot/index.ts:275

    chatCompletion: () => process.env.DEBUG_MOONSHOT_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a186fc7b0b4fc54e — Environment-variable access.

repo/packages/model-runtime/src/providers/nebius/index.test.ts:47

      delete process.env.DEBUG_NEBIUS_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ec9e4d48d68e062f — Environment-variable access.

repo/packages/model-runtime/src/providers/nebius/index.test.ts:52

      process.env.DEBUG_NEBIUS_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aa92e4371c02e8af — Environment-variable access.

repo/packages/model-runtime/src/providers/nebius/index.test.ts:54

      delete process.env.DEBUG_NEBIUS_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a293e9a495038d0a — Environment-variable access.

repo/packages/model-runtime/src/providers/nebius/index.ts:25

    chatCompletion: () => process.env.DEBUG_NEBIUS_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3b0a8da13f8d1c74 — Environment-variable access.

repo/packages/model-runtime/src/providers/newapi/index.test.ts:38

    delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2b82afc6fa652dce — Environment-variable access.

repo/packages/model-runtime/src/providers/newapi/index.test.ts:43

    delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bf2d08ba7adb7272 — Environment-variable access.

repo/packages/model-runtime/src/providers/newapi/index.test.ts:48

      delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1878fd61a76ededa — Environment-variable access.

repo/packages/model-runtime/src/providers/newapi/index.test.ts:49

      const debugResult = process.env.DEBUG_NEWAPI_CHAT_COMPLETION === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dbba3a3cfafb9929 — Environment-variable access.

repo/packages/model-runtime/src/providers/newapi/index.test.ts:54

      process.env.DEBUG_NEWAPI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dbdc1ee5da38d1fd — Environment-variable access.

repo/packages/model-runtime/src/providers/newapi/index.test.ts:55

      const debugResult = process.env.DEBUG_NEWAPI_CHAT_COMPLETION === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #87c25abc7bfc5076 — Environment-variable access.

repo/packages/model-runtime/src/providers/newapi/index.test.ts:683

      delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #262789d96ce8a597 — Environment-variable access.

repo/packages/model-runtime/src/providers/newapi/index.test.ts:689

      process.env.DEBUG_NEWAPI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #52429cf83d1fc94f — Environment-variable access.

repo/packages/model-runtime/src/providers/newapi/index.test.ts:692

      delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ceb3674f7beed2d0 — Environment-variable access.

repo/packages/model-runtime/src/providers/newapi/index.test.ts:696

      process.env.DEBUG_NEWAPI_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #35f5a315a361adb0 — Environment-variable access.

repo/packages/model-runtime/src/providers/newapi/index.test.ts:699

      delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #769f403a87554850 — Environment-variable access.

repo/packages/model-runtime/src/providers/newapi/index.ts:76

    chatCompletion: () => process.env.DEBUG_NEWAPI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f3291111a3f7ffc9 — Environment-variable access.

repo/packages/model-runtime/src/providers/novita/index.ts:23

    chatCompletion: () => process.env.DEBUG_NOVITA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7693d3deabb1cfaa — Environment-variable access.

repo/packages/model-runtime/src/providers/nvidia/index.test.ts:235

      process.env.DEBUG_NVIDIA_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b06b3f30a8499f28 — Environment-variable access.

repo/packages/model-runtime/src/providers/nvidia/index.test.ts:238

      delete process.env.DEBUG_NVIDIA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f8d2cb64de2c3823 — Environment-variable access.

repo/packages/model-runtime/src/providers/nvidia/index.test.ts:242

      delete process.env.DEBUG_NVIDIA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #61e2d5d323d4d7df — Environment-variable access.

repo/packages/model-runtime/src/providers/nvidia/index.ts:82

    chatCompletion: () => process.env.DEBUG_NVIDIA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9ecdf4dd965dad5d — Environment-variable access.

repo/packages/model-runtime/src/providers/ollama/index.test.ts:303

        const originalDebugValue = process.env.DEBUG_OLLAMA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f587477b1abb61c2 — Environment-variable access.

repo/packages/model-runtime/src/providers/ollama/index.test.ts:304

        process.env.DEBUG_OLLAMA_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0231e0968e029014 — Environment-variable access.

repo/packages/model-runtime/src/providers/ollama/index.test.ts:326

        process.env.DEBUG_OLLAMA_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7037346f650c6c29 — Environment-variable access.

repo/packages/model-runtime/src/providers/ollama/index.test.ts:1041

      delete process.env.DEBUG_OLLAMA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bcceb09c674f9c92 — Environment-variable access.

repo/packages/model-runtime/src/providers/ollama/index.test.ts:1047

      process.env.DEBUG_OLLAMA_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #373fac4f815ad936 — Environment-variable access.

repo/packages/model-runtime/src/providers/ollama/index.test.ts:1050

      delete process.env.DEBUG_OLLAMA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #25b41376adb00904 — Environment-variable access.

repo/packages/model-runtime/src/providers/ollama/index.ts:34

    chatCompletion: () => process.env.DEBUG_OLLAMA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f4db4c4f7b3d9008 — Environment-variable access.

repo/packages/model-runtime/src/providers/ollama/index.ts:81

      if (process.env.DEBUG_OLLAMA_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dca993b447356485 — Environment-variable access.

repo/packages/model-runtime/src/providers/ollamacloud/index.test.ts:52

      delete process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #61070187b58a0149 — Environment-variable access.

repo/packages/model-runtime/src/providers/ollamacloud/index.test.ts:58

      process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4b699d4f8508dce5 — Environment-variable access.

repo/packages/model-runtime/src/providers/ollamacloud/index.test.ts:64

      process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #13131b17b7f64dc7 — Environment-variable access.

repo/packages/model-runtime/src/providers/ollamacloud/index.test.ts:70

      process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1de9f90c5f40341e — Environment-variable access.

repo/packages/model-runtime/src/providers/ollamacloud/index.ts:20

    chatCompletion: () => process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #51867557c027f53c — Environment-variable access.

repo/packages/model-runtime/src/providers/openai/index.test.ts:243

        const originalDebugValue = process.env.DEBUG_OPENAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #326838554847c54e — Environment-variable access.

repo/packages/model-runtime/src/providers/openai/index.test.ts:246

        process.env.DEBUG_OPENAI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5d402b06d5eb82fd — Environment-variable access.

repo/packages/model-runtime/src/providers/openai/index.test.ts:262

        process.env.DEBUG_OPENAI_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f997fc4322043e08 — Environment-variable access.

repo/packages/model-runtime/src/providers/openai/index.test.ts:540

      delete process.env.DEBUG_OPENAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f3181b9bf0219e28 — Environment-variable access.

repo/packages/model-runtime/src/providers/openai/index.test.ts:546

      const originalEnv = process.env.DEBUG_OPENAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2fa47c47c27bd51f — Environment-variable access.

repo/packages/model-runtime/src/providers/openai/index.test.ts:547

      process.env.DEBUG_OPENAI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3528aa9c7368d6ba — Environment-variable access.

repo/packages/model-runtime/src/providers/openai/index.test.ts:550

      process.env.DEBUG_OPENAI_CHAT_COMPLETION = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #00b001e7d2b4a053 — Environment-variable access.

repo/packages/model-runtime/src/providers/openai/index.test.ts:554

      delete process.env.DEBUG_OPENAI_RESPONSES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cbfde6887d07aa6b — Environment-variable access.

repo/packages/model-runtime/src/providers/openai/index.test.ts:560

      const originalEnv = process.env.DEBUG_OPENAI_RESPONSES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4b83adffa9af70d5 — Environment-variable access.

repo/packages/model-runtime/src/providers/openai/index.test.ts:561

      process.env.DEBUG_OPENAI_RESPONSES = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3a62f3c42d08020a — Environment-variable access.

repo/packages/model-runtime/src/providers/openai/index.test.ts:564

      process.env.DEBUG_OPENAI_RESPONSES = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0f82b9fab9c55d1f — Environment-variable access.

repo/packages/model-runtime/src/providers/openai/index.ts:20

const oaiSearchContextSize = process.env.OPENAI_SEARCH_CONTEXT_SIZE; // low, medium, high

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dc9d725f41232b98 — Environment-variable access.

repo/packages/model-runtime/src/providers/openai/index.ts:21

const enableServiceTierFlex = process.env.OPENAI_SERVICE_TIER_FLEX === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d2511563f40340c1 — Environment-variable access.

repo/packages/model-runtime/src/providers/openai/index.ts:67

    chatCompletion: () => process.env.DEBUG_OPENAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #519b7387117872a7 — Environment-variable access.

repo/packages/model-runtime/src/providers/openai/index.ts:68

    responses: () => process.env.DEBUG_OPENAI_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #e1846def6eb41dff — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/model-runtime/src/providers/opencodeCodingPlan/index.ts:99

    const res = await fetch(MODELS_DEV_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #1168f9fe1f0058fd — Environment-variable access.

repo/packages/model-runtime/src/providers/opencodeCodingPlan/index.ts:395

    chatCompletion: () => process.env.DEBUG_OPENCODE_GO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ca6e9de35f4e19ce — Environment-variable access.

repo/packages/model-runtime/src/providers/opencodeCodingPlan/index.ts:408

    chatCompletion: () => process.env.DEBUG_OPENCODE_GO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #401d182b4563cbf3 — Environment-variable access.

repo/packages/model-runtime/src/providers/opencodeZen/index.ts:26

    chatCompletion: () => process.env.DEBUG_OPENCODE_ZEN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eed229ffb3dce5ac — Environment-variable access.

repo/packages/model-runtime/src/providers/openrouter/index.test.ts:80

      delete process.env.DEBUG_OPENROUTER_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f90ac189d3fb356c — Environment-variable access.

repo/packages/model-runtime/src/providers/openrouter/index.test.ts:86

      process.env.DEBUG_OPENROUTER_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #86e900750216fc69 — Environment-variable access.

repo/packages/model-runtime/src/providers/openrouter/index.test.ts:89

      delete process.env.DEBUG_OPENROUTER_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bdcc6899d43265c6 — Environment-variable access.

repo/packages/model-runtime/src/providers/openrouter/index.ts:93

    chatCompletion: () => process.env.DEBUG_OPENROUTER_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #9b62fdc246e8795e — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/model-runtime/src/providers/openrouter/index.ts:96

    const response = await fetch('https://openrouter.ai/api/v1/models');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #1e77c67e66019135 — Environment-variable access.

repo/packages/model-runtime/src/providers/perplexity/index.ts:42

    chatCompletion: () => process.env.DEBUG_PERPLEXITY_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d4933dc906e0fd96 — Environment-variable access.

repo/packages/model-runtime/src/providers/ppio/index.ts:15

    chatCompletion: () => process.env.DEBUG_PPIO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #124c6b2c16017502 — Environment-variable access.

repo/packages/model-runtime/src/providers/qiniu/index.test.ts:37

      delete process.env.DEBUG_QINIU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b29dbff20614f781 — Environment-variable access.

repo/packages/model-runtime/src/providers/qiniu/index.test.ts:43

      process.env.DEBUG_QINIU_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #96d6415582f6023e — Environment-variable access.

repo/packages/model-runtime/src/providers/qiniu/index.test.ts:46

      delete process.env.DEBUG_QINIU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5bd472b5dd36afe5 — Environment-variable access.

repo/packages/model-runtime/src/providers/qiniu/index.test.ts:50

      process.env.DEBUG_QINIU_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8117242af030a89f — Environment-variable access.

repo/packages/model-runtime/src/providers/qiniu/index.test.ts:53

      delete process.env.DEBUG_QINIU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #84a141e540ec1f6b — Environment-variable access.

repo/packages/model-runtime/src/providers/qiniu/index.ts:11

    chatCompletion: () => process.env.DEBUG_QINIU_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #628e97394ef9d9dc — Environment-variable access.

repo/packages/model-runtime/src/providers/qwen/index.ts:114

            search_strategy: process.env.QWEN_SEARCH_STRATEGY || 'standard', // standard or pro

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6b629a42b422b76b — Environment-variable access.

repo/packages/model-runtime/src/providers/qwen/index.ts:126

    chatCompletion: () => process.env.DEBUG_QWEN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e862e98e590eea80 — Environment-variable access.

repo/packages/model-runtime/src/providers/replicate/index.ts:416

      process.env.DEBUG_REPLICATE === '1' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aa788b120e25e6d9 — Environment-variable access.

repo/packages/model-runtime/src/providers/replicate/index.ts:417

      process.env.DEBUG_REPLICATE_CHAT_COMPLETION === '1' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dd2e813c99bbb896 — Environment-variable access.

repo/packages/model-runtime/src/providers/replicate/index.ts:418

      process.env.NODE_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2722441a71e738e8 — Environment-variable access.

repo/packages/model-runtime/src/providers/sambanova/index.ts:8

    chatCompletion: () => process.env.DEBUG_SAMBANOVA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #60c188f39c0d04d1 — Environment-variable access.

repo/packages/model-runtime/src/providers/search1api/index.test.ts:37

      delete process.env.DEBUG_SEARCH1API_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #98714522968ec5ac — Environment-variable access.

repo/packages/model-runtime/src/providers/search1api/index.test.ts:43

      process.env.DEBUG_SEARCH1API_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d92f8d0129fe7831 — Environment-variable access.

repo/packages/model-runtime/src/providers/search1api/index.test.ts:46

      delete process.env.DEBUG_SEARCH1API_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0739800ce82f7c19 — Environment-variable access.

repo/packages/model-runtime/src/providers/search1api/index.ts:38

    chatCompletion: () => process.env.DEBUG_SEARCH1API_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #62beb39699f64ce2 — Environment-variable access.

repo/packages/model-runtime/src/providers/sensenova/index.ts:50

    chatCompletion: () => process.env.DEBUG_SENSENOVA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #add6999ee5c12e6c — Environment-variable access.

repo/packages/model-runtime/src/providers/siliconcloud/index.ts:142

    chatCompletion: () => process.env.DEBUG_SILICONCLOUD_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #90fbddd03d4adbcb — Environment-variable access.

repo/packages/model-runtime/src/providers/spark/index.test.ts:43

      delete process.env.DEBUG_SPARK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4361cd8a94a5380d — Environment-variable access.

repo/packages/model-runtime/src/providers/spark/index.test.ts:49

      process.env.DEBUG_SPARK_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2a24cc9a51d0ec03 — Environment-variable access.

repo/packages/model-runtime/src/providers/spark/index.test.ts:52

      delete process.env.DEBUG_SPARK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d8cc3318fd42f916 — Environment-variable access.

repo/packages/model-runtime/src/providers/spark/index.test.ts:56

      process.env.DEBUG_SPARK_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c82a259c9dbaef75 — Environment-variable access.

repo/packages/model-runtime/src/providers/spark/index.test.ts:59

      delete process.env.DEBUG_SPARK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2261518082c38f13 — Environment-variable access.

repo/packages/model-runtime/src/providers/spark/index.test.ts:111

      delete process.env.SPARK_SEARCH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #24e3811953289570 — Environment-variable access.

repo/packages/model-runtime/src/providers/spark/index.test.ts:125

      process.env.SPARK_SEARCH_MODE = 'deep';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #90288f658ba0d000 — Environment-variable access.

repo/packages/model-runtime/src/providers/spark/index.test.ts:136

      delete process.env.SPARK_SEARCH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e4f88d25c2d63cb2 — Environment-variable access.

repo/packages/model-runtime/src/providers/spark/index.ts:46

                search_mode: process.env.SPARK_SEARCH_MODE || 'normal', // normal or deep

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1214401eba799a8a — Environment-variable access.

repo/packages/model-runtime/src/providers/spark/index.ts:67

    chatCompletion: () => process.env.DEBUG_SPARK_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #86d222a0149efc1a — Environment-variable access.

repo/packages/model-runtime/src/providers/stepfun/index.test.ts:47

      delete process.env.DEBUG_STEPFUN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c1baa3e11100b527 — Environment-variable access.

repo/packages/model-runtime/src/providers/stepfun/index.test.ts:52

      process.env.DEBUG_STEPFUN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ed4bce249b718c0b — Environment-variable access.

repo/packages/model-runtime/src/providers/stepfun/index.test.ts:54

      delete process.env.DEBUG_STEPFUN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cf0ab696c9645444 — Environment-variable access.

repo/packages/model-runtime/src/providers/stepfun/index.ts:38

    chatCompletion: () => process.env.DEBUG_STEPFUN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #79bab42761115c9d — Environment-variable access.

repo/packages/model-runtime/src/providers/straico/index.ts:40

    chatCompletion: () => process.env.DEBUG_STRAICO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #818e50ef853882e8 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/model-runtime/src/providers/straico/index.ts:44

    const response = await fetch(url, {
      headers: {
        Authorization: `Bearer ${client.apiKey}`,
      },
      method: 'GET',
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #3f2b0c4f57d26b8e — Environment-variable access.

repo/packages/model-runtime/src/providers/streamlake/index.ts:19

    chatCompletion: () => process.env.DEBUG_STREAMLAKE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9c5d15621ba74dae — Environment-variable access.

repo/packages/model-runtime/src/providers/superGrok/index.ts:31

    chatCompletion: () => process.env.DEBUG_SUPERGROK_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1e585b424b6f0b07 — Environment-variable access.

repo/packages/model-runtime/src/providers/superGrok/index.ts:32

    responses: () => process.env.DEBUG_SUPERGROK_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c77b4c5b975ed4ff — Environment-variable access.

repo/packages/model-runtime/src/providers/taichu/index.ts:21

    chatCompletion: () => process.env.DEBUG_TAICHU_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c18458bded2b5e7e — Environment-variable access.

repo/packages/model-runtime/src/providers/tencentcloud/index.test.ts:40

      delete process.env.DEBUG_TENCENT_CLOUD_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #60c6a99d998b3e5e — Environment-variable access.

repo/packages/model-runtime/src/providers/tencentcloud/index.test.ts:44

      process.env.DEBUG_TENCENT_CLOUD_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e5189054cbe52ef7 — Environment-variable access.

repo/packages/model-runtime/src/providers/tencentcloud/index.test.ts:48

      delete process.env.DEBUG_TENCENT_CLOUD_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ac9514272cae12b8 — Environment-variable access.

repo/packages/model-runtime/src/providers/tencentcloud/index.ts:14

    chatCompletion: () => process.env.DEBUG_TENCENT_CLOUD_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #77696d6eb8d2309a — Environment-variable access.

repo/packages/model-runtime/src/providers/togetherai/index.test.ts:47

      delete process.env.DEBUG_TOGETHERAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c57b7b62f3151734 — Environment-variable access.

repo/packages/model-runtime/src/providers/togetherai/index.test.ts:51

      process.env.DEBUG_TOGETHERAI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #276760e39f2c72ef — Environment-variable access.

repo/packages/model-runtime/src/providers/togetherai/index.test.ts:55

      delete process.env.DEBUG_TOGETHERAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ec3e8771e78c4dfd — Environment-variable access.

repo/packages/model-runtime/src/providers/togetherai/index.ts:17

    chatCompletion: () => process.env.DEBUG_TOGETHERAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fad7a3e19438d6bb — Environment-variable access.

repo/packages/model-runtime/src/providers/upstage/index.ts:8

    chatCompletion: () => process.env.DEBUG_UPSTAGE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d3e258807122a7cc — Environment-variable access.

repo/packages/model-runtime/src/providers/v0/index.test.ts:61

      delete process.env.DEBUG_V0_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5a37c06c33762104 — Environment-variable access.

repo/packages/model-runtime/src/providers/v0/index.test.ts:67

      process.env.DEBUG_V0_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bdd579be3ed32a15 — Environment-variable access.

repo/packages/model-runtime/src/providers/v0/index.test.ts:73

      process.env.DEBUG_V0_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #78f16c9adf77e7fc — Environment-variable access.

repo/packages/model-runtime/src/providers/v0/index.test.ts:79

      process.env.DEBUG_V0_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #baf302addcf88fa6 — Environment-variable access.

repo/packages/model-runtime/src/providers/v0/index.ts:14

    chatCompletion: () => process.env.DEBUG_V0_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7186d59c3fe508a0 — Environment-variable access.

repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:51

      delete process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c695edc340ef788c — Environment-variable access.

repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:57

      process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f100741a7cfe0e54 — Environment-variable access.

repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:60

      delete process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #564da0ee8c273710 — Environment-variable access.

repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:64

      process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fd8d8448b37bf7b1 — Environment-variable access.

repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:67

      delete process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #99f2c99e2999f854 — Environment-variable access.

repo/packages/model-runtime/src/providers/vercelaigateway/index.ts:87

    chatCompletion: () => process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bb3e1a4ef19dcdfd — Environment-variable access.

repo/packages/model-runtime/src/providers/vllm/index.ts:13

    chatCompletion: () => process.env.DEBUG_VLLM_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d28b64a1db3f75ab — Environment-variable access.

repo/packages/model-runtime/src/providers/volcengine/index.ts:70

    chatCompletion: () => process.env.DEBUG_VOLCENGINE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #12212db1d461e462 — Environment-variable access.

repo/packages/model-runtime/src/providers/volcengine/index.ts:71

    responses: () => process.env.DEBUG_VOLCENGINE_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a461d7a2a759c11a — Environment-variable access.

repo/packages/model-runtime/src/providers/volcengineCodingPlan/index.ts:28

    chatCompletion: () => process.env.DEBUG_VOLCENGINE_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c16cb140578c5011 — Environment-variable access.

repo/packages/model-runtime/src/providers/wenxin/index.test.ts:126

      delete process.env.DEBUG_WENXIN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5fcf33c34e14e2d0 — Environment-variable access.

repo/packages/model-runtime/src/providers/wenxin/index.test.ts:132

      process.env.DEBUG_WENXIN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #79b59ed4d48919f4 — Environment-variable access.

repo/packages/model-runtime/src/providers/wenxin/index.test.ts:138

      process.env.DEBUG_WENXIN_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1ad9c3b8ca84676a — Environment-variable access.

repo/packages/model-runtime/src/providers/wenxin/index.ts:49

    chatCompletion: () => process.env.DEBUG_WENXIN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2e710b1aeabf8860 — Environment-variable access.

repo/packages/model-runtime/src/providers/xai/index.ts:149

    chatCompletion: () => process.env.DEBUG_XAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #37dcf72d1b0d4fde — Environment-variable access.

repo/packages/model-runtime/src/providers/xai/index.ts:150

    responses: () => process.env.DEBUG_XAI_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #890c93c195a7b954 — Environment-variable access.

repo/packages/model-runtime/src/providers/xiaomimimo/index.test.ts:277

      delete process.env.DEBUG_XIAOMIMIMO_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c74914fc59158a77 — Environment-variable access.

repo/packages/model-runtime/src/providers/xiaomimimo/index.test.ts:283

      process.env.DEBUG_XIAOMIMIMO_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5774ec9f036d2bd4 — Environment-variable access.

repo/packages/model-runtime/src/providers/xiaomimimo/index.test.ts:286

      delete process.env.DEBUG_XIAOMIMIMO_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #788192c4b7a9f13f — Environment-variable access.

repo/packages/model-runtime/src/providers/xiaomimimo/index.ts:107

    chatCompletion: () => process.env.DEBUG_XIAOMIMIMO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2960de0e1015d9cb — Environment-variable access.

repo/packages/model-runtime/src/providers/xinference/index.ts:18

    chatCompletion: () => process.env.DEBUG_XINFERENCE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #85ce413ca3c01e0f — Environment-variable access.

repo/packages/model-runtime/src/providers/zenmux/index.test.ts:31

    delete process.env.DEBUG_ZENMUX_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dbb7b4fc4da718a7 — Environment-variable access.

repo/packages/model-runtime/src/providers/zenmux/index.test.ts:36

    delete process.env.DEBUG_ZENMUX_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4bb0da60f90bfb7d — Environment-variable access.

repo/packages/model-runtime/src/providers/zenmux/index.test.ts:41

      delete process.env.DEBUG_ZENMUX_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #93272de89cd9063e — Environment-variable access.

repo/packages/model-runtime/src/providers/zenmux/index.test.ts:42

      const debugResult = process.env.DEBUG_ZENMUX_CHAT_COMPLETION === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ac7f3bc7a2363023 — Environment-variable access.

repo/packages/model-runtime/src/providers/zenmux/index.test.ts:47

      process.env.DEBUG_ZENMUX_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #635dc5c27b4a9744 — Environment-variable access.

repo/packages/model-runtime/src/providers/zenmux/index.test.ts:48

      const debugResult = process.env.DEBUG_ZENMUX_CHAT_COMPLETION === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2dec2e21406f2abe — Environment-variable access.

repo/packages/model-runtime/src/providers/zenmux/index.ts:39

    chatCompletion: () => process.env.DEBUG_ZENMUX_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f58dbac9d213cc44 — Environment-variable access.

repo/packages/model-runtime/src/providers/zeroone/index.test.ts:55

      delete process.env.DEBUG_ZEROONE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #23ed26782e112257 — Environment-variable access.

repo/packages/model-runtime/src/providers/zeroone/index.test.ts:61

      process.env.DEBUG_ZEROONE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d2734955c4d833c5 — Environment-variable access.

repo/packages/model-runtime/src/providers/zeroone/index.test.ts:67

      process.env.DEBUG_ZEROONE_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1cb66277d93fb091 — Environment-variable access.

repo/packages/model-runtime/src/providers/zeroone/index.test.ts:73

      process.env.DEBUG_ZEROONE_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0caa6d98479bf0f9 — Environment-variable access.

repo/packages/model-runtime/src/providers/zeroone/index.ts:14

    chatCompletion: () => process.env.DEBUG_ZEROONE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3e7189a8edad0f35 — Environment-variable access.

repo/packages/model-runtime/src/providers/zhipu/index.test.ts:44

      delete process.env.DEBUG_ZHIPU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #af9b6d24dff6ca8b — Environment-variable access.

repo/packages/model-runtime/src/providers/zhipu/index.test.ts:50

      process.env.DEBUG_ZHIPU_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a0aa55074ce23f59 — Environment-variable access.

repo/packages/model-runtime/src/providers/zhipu/index.test.ts:53

      delete process.env.DEBUG_ZHIPU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #10d81d5306ca7c23 — Environment-variable access.

repo/packages/model-runtime/src/providers/zhipu/index.test.ts:112

        process.env.ZHIPU_SEARCH_ENGINE = 'search_pro';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bca04a5ffdc6140a — Environment-variable access.

repo/packages/model-runtime/src/providers/zhipu/index.test.ts:129

        delete process.env.ZHIPU_SEARCH_ENGINE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4d92d96213ef4c37 — Environment-variable access.

repo/packages/model-runtime/src/providers/zhipu/index.ts:85

                search_engine: process.env.ZHIPU_SEARCH_ENGINE || 'search_std', // search_std, search_pro

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea37fbc28e29c2b8 — Environment-variable access.

repo/packages/model-runtime/src/providers/zhipu/index.ts:215

    chatCompletion: () => process.env.DEBUG_ZHIPU_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #0835f0c25aa08da4 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/model-runtime/src/providers/zhipu/index.ts:220

    const response = await fetch(url, {
      headers: {
        'Authorization': `Bearer ${client.apiKey}`,
        'Bigmodel-Organization': 'lobehub',
        'Bigmodel-Project': 'lobechat',
      },
      method: 'GET',
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #20365a1ebc7ee23a — Filesystem access.

repo/packages/model-runtime/src/utils/modelConfigImport.test.ts:13

        readFile(path.resolve(utilsDir, file), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm)

npm first-party

high pii_flow production #0a5b7fec8e78de90 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/scripts/docsWorkflow/utils.ts:96 · flow /tmp/closeopen-c0i_3jq8/repo/scripts/docsWorkflow/utils.ts:87 → /tmp/closeopen-c0i_3jq8/repo/scripts/docsWorkflow/utils.ts:96

    const response = await fetch(url, { headers });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #58c589b9aa951c61 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/scripts/serverLauncher/startServer.js:141 · flow /tmp/closeopen-c0i_3jq8/repo/scripts/serverLauncher/startServer.js:131 → /tmp/closeopen-c0i_3jq8/repo/scripts/serverLauncher/startServer.js:141

      const res = await fetch(url, {
        method: 'POST',
        headers: {
          'Authorization': `Bearer ${KEY_VAULTS_SECRET}`,
          'Content-Type': 'application/json',
        },
        body: JSON.stringify({}),
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #54b65b38b5e54fb4 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/scripts/serverLauncher/startServer.js:185 · flow /tmp/closeopen-c0i_3jq8/repo/scripts/serverLauncher/startServer.js:168 → /tmp/closeopen-c0i_3jq8/repo/scripts/serverLauncher/startServer.js:185

    const res = await fetch(url, {
      method: 'POST',
      headers: {
        'Authorization': `Bearer ${QSTASH_TOKEN}`,
        'Content-Type': 'application/json',
        'Upstash-Method': 'POST',
        'Upstash-Cron': '*/10 * * * *',
        'Upstash-Schedule-Id': 'lobe-task-schedule-dispatch',
      },
      body: JSON.stringify({}),
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #8da0b1d557506ac5 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/src/app/(backend)/market/oidc/[[...segments]]/route.ts:185 · flow /tmp/closeopen-c0i_3jq8/repo/src/app/(backend)/market/oidc/[[...segments]]/route.ts:7 → /tmp/closeopen-c0i_3jq8/repo/src/app/(backend)/market/oidc/[[...segments]]/route.ts:185

          const response = await fetch(userInfoUrl, {
            headers: {
              'Content-Type': 'application/json',
              'x-lobe-trust-token': trustedClientToken,
            },
            method: 'GET',
          });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #739dbb2bec3411ed — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/src/layout/AuthProvider/MarketAuth/oidc.ts:150 · flow /tmp/closeopen-c0i_3jq8/repo/src/layout/AuthProvider/MarketAuth/oidc.ts:142 → /tmp/closeopen-c0i_3jq8/repo/src/layout/AuthProvider/MarketAuth/oidc.ts:150

    const response = await fetch(tokenUrl, {
      body: body.toString(),
      headers: {
        'Content-Type': 'application/x-www-form-urlencoded',
      },
      method: 'POST',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

medium telemetry production #efb5898d84a318a9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/src/components/Analytics/HomePageTracker.tsx:15

      analytics.track({
        name: 'main_page_view',
        properties: {
          spm: 'homepage.main_page.view',
        },
      });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #b7a9f254f82c62b1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/src/features/AgentSetting/store/action.ts:316

        analytics.track({
          name: 'agent_meta_updated',
          properties: {
            assistant_avatar: mergedMeta.avatar,
            assistant_background_color: mergedMeta.backgroundColor,
            assistant_description: mergedMeta.description,
            assistant_name: mergedMeta.title,
            assistant_tags: mergedMeta.tags,
            is_inbox: id === 'inbox',
            session_id: id || 'unknown',
            timestamp: Date.now(),
            user_id: useUserStore.getState().user?.id || 'anonymous',
          },
        });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #c93ca37c110b4e25 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/src/features/Billboard/Carousel.tsx:146

      analytics?.track({
        name: 'billboard_cta_clicked',
        properties: {
          billboard_slug: billboardSlug,
          item_id: item.id,
          link_url: item.linkUrl,
          position,
          spm: 'billboard.cta.clicked',
        },
      });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #7f6c6a55b7275a30 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/src/features/Billboard/Carousel.tsx:245

      void analytics.track({
        name: 'billboard_served',
        properties: {
          billboard_slug: set.slug,
          item_count: set.items.length,
          spm: 'billboard.card.served',
        },
      });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #8a2dbf49f133e6e2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/src/features/Billboard/index.tsx:48

      analytics?.track({
        name: 'billboard_dismissed',
        properties: {
          billboard_slug: billboard.slug,
          item_count: billboard.items.length,
          spm: 'billboard.dismiss.clicked',
        },
      });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #a536cf11fd2888fc — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/src/features/User/UserLoginOrSignup/trackLoginOrSignupClicked.ts:23

    await analytics.track({
      name: 'login_or_signup_clicked',
      properties: {
        ...(lhCid && { lh_cid: lhCid }),
        ...(provider && { provider }),
        spm,
      },
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #41874508a7495227 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/src/libs/analytics/productUsageEvent.ts:27

    await analytics.track(event);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #b729544fcb14a849 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/src/routes/(main)/home/_layout/Footer/index.tsx:177

        analytics?.track({ name: eventName, properties });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #e7908142b64574c1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/src/routes/(main)/home/_layout/Footer/index.tsx:188

        analytics?.track({
          name: 'home_footer_menu_clicked',
          properties: { key, spm: `homepage.footer.${key}.clicked` },
        });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #0527fa0480fc50dd — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/src/routes/(main)/home/_layout/Footer/index.tsx:451

        analytics?.track({
          name: 'home_footer_menu_opened',
          properties: { keys: trackedMenuKeys.join(','), spm: 'homepage.footer.opened' },
        });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #0010c5dced84d0e1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/src/routes/(mobile)/(home)/features/SessionListContent/List/index.tsx:65

                analytics?.track({
                  name: 'switch_session',
                  properties: {
                    assistant_name: session.meta?.title || 'Untitled Agent',
                    assistant_tags: session.meta?.tags || [],
                    group_id: sessionGroupId,
                    group_name: groupName,
                    session_id: id,
                    spm: 'homepage.chat.session_list_item.click',
                    user_id: userId || 'anonymous',
                  },
                });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #b918fcda2a57f74d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/src/services/onboardingFeedback/index.ts:62

    options.analytics?.track({
      name: FEEDBACK_EVENT_NAME,
      properties: {
        rating: payload.rating,
        spm: FEEDBACK_SPM,
      },
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #570260d2917e82a2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/src/services/onboardingMetrics/index.ts:34

    client.track({ name, properties });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #0991476b2e6ab280 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/src/store/agent/slices/agent/action.ts:152

      analytics.track({
        name: 'new_agent_created',
        properties: {
          agent_id: result.agentId,
          assistant_name: params.config?.title || 'Untitled Agent',
          assistant_tags: params.config?.tags || [],
          user_id: userId || 'anonymous',
        },
      });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #d9bbe0be4457060b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/src/store/session/slices/session/action.ts:80

      analytics.track({
        name: 'new_agent_created',
        properties: {
          assistant_name: newSession.meta?.title || 'Untitled Agent',
          assistant_tags: newSession.meta?.tags || [],
          session_id: id,
          user_id: userId || 'anonymous',
        },
      });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 620 low-confidence finding(s)

low env_fs production #30d3a23217730186 — Filesystem access.

repo/.agents/scripts/check/autofix.ts:39

        return [file, await readFile(path.join(rootDir(), file), 'utf8')];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e6ffa7ae29476614 — Filesystem access.

repo/.agents/scripts/check/autofix.ts:62

      current = await readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f26da4c1c94bad45 — Filesystem access.

repo/.agents/scripts/check/autofix.ts:69

    await writeFile(origCopy, original);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d042bb03fa264ba4 — Filesystem access.

repo/.agents/scripts/check/autofix.ts:85

  await writeFile(diffFile, diffs.map((entry) => entry.diff).join('\n\n') + '\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6882b92724ac54db — Filesystem access.

repo/.agents/scripts/check/check.test.ts:84

    const pkg = JSON.parse(await readFile(path.join(repoRoot, 'package.json'), 'utf8')) as {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6caa9c5c86352f2a — Filesystem access.

repo/.agents/scripts/check/delegate.ts:29

    content = await readFile(gitPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6da84504b7c4dbb6 — Filesystem access.

repo/.agents/scripts/check/delegate.ts:41

    const pkg = JSON.parse(await readFile(path.join(hostRoot, 'package.json'), 'utf8')) as {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7f783fef36772744 — Filesystem access.

repo/.agents/skills/agent-testing/scripts/agent-browser-klm-analyze.mjs:99

  const raw = await readFile(tracePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #edbf84e49227234c — Filesystem access.

repo/.agents/skills/agent-testing/scripts/agent-browser-klm-analyze.mjs:204

  const raw = await readFile(resultPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #217025c67a6fd955 — Filesystem access.

repo/.agents/skills/agent-testing/scripts/agent-browser-klm-analyze.mjs:209

    await writeFile(resultPath, `${JSON.stringify(result, null, 2)}\n`, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7d1b1856f02d0369 — Environment-variable access.

repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:99

    checkItemId: process.env.AGENT_BROWSER_KLM_CHECK || process.env.KLM_CHECK_ITEM_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #12bc8fde6d4b7fcd — Environment-variable access.

repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:100

    label: process.env.AGENT_BROWSER_KLM_LABEL || process.env.KLM_LABEL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #16f3ccd6e04efa66 — Environment-variable access.

repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:101

    phaseId: process.env.AGENT_BROWSER_KLM_PHASE || process.env.KLM_PHASE_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #120c89822346077a — Environment-variable access.

repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:102

    surface: process.env.AGENT_BROWSER_KLM_SURFACE || process.env.KLM_SURFACE || 'web',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1034f1a1a5055761 — Environment-variable access.

repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:103

    commandTimeoutMs: parseNumber(process.env.AGENT_BROWSER_KLM_COMMAND_TIMEOUT_MS, undefined),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5a4e88220e7f3817 — Environment-variable access.

repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:105

      process.env.AGENT_BROWSER_KLM_TRACE ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bde9df419d65b9f8 — Environment-variable access.

repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:106

      process.env.INTERACTION_TRACE ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2147b1af51f731b1 — Environment-variable access.

repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:109

  let binary = process.env.AGENT_BROWSER_BIN || 'agent-browser';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #823e87922ac6c296 — Filesystem access.

repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:325

    const text = readFileSync(file, 'utf8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f26faf066f2809ba — Filesystem access.

repo/.agents/skills/agent-testing/scripts/agent-gateway/analyze-events.ts:32

const raw = readFileSync(file, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8120b5d2fca312ab — Filesystem access.

repo/.agents/skills/agent-testing/scripts/agent-gateway/analyze.mjs:29

const raw = JSON.parse(fs.readFileSync(file, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f74dab6167eac673 — Environment-variable access.

repo/.agents/skills/agent-testing/scripts/agent-gateway/local-gateway-probe.mjs:26

const WS_BASE = process.env.GATEWAY_WS || 'ws://localhost:8787';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #76867edffeb285c7 — Filesystem access.

repo/.agents/skills/agent-testing/scripts/agent-gateway/local-gateway-probe.mjs:30

  const m = readFileSync(p, 'utf8').match(/^JWKS_KEY=(.*)$/m);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a8287f8337448bfe — Environment-variable access.

repo/.agents/skills/agent-testing/scripts/agent-gateway/local-gateway-probe.mjs:34

  process.env.JWKS_KEY?.trim() ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c16ce7a68c6c1dc2 — Environment-variable access.

repo/.agents/skills/agent-testing/scripts/agent-gateway/local-gateway-probe.mjs:35

  fromFile(process.env.JWKS_SOURCE) ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1841903b8f4dc4da — Filesystem access.

repo/.agents/skills/agent-testing/scripts/agent-gateway/run.ts:153

  writeFileSync(dumpPath, json, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8e062c1fb95517db — Filesystem access.

repo/.agents/skills/agent-testing/scripts/cdp-capture.cjs:106

  fs.writeFileSync(OUT, buf);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f2cc9cfcd067f341 — Environment-variable access.

repo/.agents/skills/agent-testing/scripts/check-s3.mjs:11

const endpoint = process.env.S3_ENDPOINT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c0c1a2da0fe78967 — Environment-variable access.

repo/.agents/skills/agent-testing/scripts/check-s3.mjs:12

const bucket = process.env.S3_BUCKET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3858a36cbef6171b — Environment-variable access.

repo/.agents/skills/agent-testing/scripts/check-s3.mjs:21

    accessKeyId: process.env.S3_ACCESS_KEY_ID || 'S3RVER',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ed42550435fdf33e — Environment-variable access.

repo/.agents/skills/agent-testing/scripts/check-s3.mjs:22

    secretAccessKey: process.env.S3_SECRET_ACCESS_KEY || 'S3RVER',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #969b450cf57664c4 — Environment-variable access.

repo/.agents/skills/agent-testing/scripts/check-s3.mjs:25

  forcePathStyle: process.env.S3_ENABLE_PATH_STYLE !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a9d653f2305c2af6 — Environment-variable access.

repo/.agents/skills/agent-testing/scripts/check-s3.mjs:26

  region: process.env.S3_REGION || 'us-east-1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5513bc41df39651c — Environment-variable access.

repo/.agents/skills/agent-testing/scripts/start-s3.mjs:8

const port = Number(process.env.S3_DEV_PORT || 29_000);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c9750c3f58a16260 — Environment-variable access.

repo/.agents/skills/agent-testing/scripts/start-s3.mjs:9

const address = process.env.S3_DEV_ADDRESS || '127.0.0.1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2d7aeb88676e1073 — Environment-variable access.

repo/.agents/skills/agent-testing/scripts/start-s3.mjs:10

const bucket = process.env.S3_BUCKET || 'agent-testing-bucket';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #52d1a8d2d894fe78 — Environment-variable access.

repo/.agents/skills/agent-testing/scripts/start-s3.mjs:11

const directory = path.resolve(process.env.S3_DATA_DIR || '.records/data/agent-testing-s3');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #744280154b944673 — Environment-variable access.

repo/.agents/skills/agent-testing/scripts/start-s3.mjs:14

for (const candidate of [process.env.APP_URL, process.env.S3_ALLOWED_ORIGIN]) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5af972a166d252bb — Environment-variable access.

repo/.agents/skills/agent-testing/scripts/start-s3.mjs:23

for (const candidatePort of [process.env.PORT, process.env.SPA_PORT, process.env.VITE_DEV_PORT]) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #47fa7b64de1b0238 — Filesystem access.

repo/.agents/skills/model-bank-metadata/scripts/apply-cutoffs.ts:17

const map: Record<string, string> = JSON.parse(readFileSync(mapPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6bf8b7475afd1a09 — Filesystem access.

repo/.agents/skills/model-bank-metadata/scripts/apply-cutoffs.ts:28

  const lines = readFileSync(path, 'utf8').split('\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e36add9fadfe6baa — Filesystem access.

repo/.agents/skills/model-bank-metadata/scripts/apply-cutoffs.ts:65

    writeFileSync(path, out.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5bfa84657954fda9 — Filesystem access.

repo/.agents/skills/model-bank-metadata/scripts/apply-family.ts:5

  readFileSync('/tmp/family-map.json', 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b8a1c5aa3ecf134b — Filesystem access.

repo/.agents/skills/model-bank-metadata/scripts/apply-family.ts:14

  const lines = readFileSync(path, 'utf8').split('\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2334c4f13c52bb9c — Filesystem access.

repo/.agents/skills/model-bank-metadata/scripts/apply-family.ts:45

    writeFileSync(path, out.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fb8f7a70d871dd6e — Filesystem access.

repo/.agents/skills/model-bank-metadata/scripts/derive-family.ts:11

const ids: string[] = JSON.parse(readFileSync('/tmp/model-ids.json', 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f7a4db73dd18be39 — Filesystem access.

repo/.agents/skills/model-bank-metadata/scripts/derive-family.ts:235

  writeFileSync('/tmp/family-map.json', JSON.stringify(map, null, 1));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5676b7fe3ba19565 — Filesystem access.

repo/.agents/skills/model-bank-metadata/scripts/extract-model-ids.ts:22

writeFileSync(out, JSON.stringify([...ids].sort(), null, 1));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #31a898666e40686d — Environment-variable access.

repo/.github/scripts/auto-close-duplicates.ts:94

  const token = process.env.GITHUB_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ffe57a39f10f1412 — Environment-variable access.

repo/.github/scripts/auto-close-duplicates.ts:100

  const owner = process.env.GITHUB_REPOSITORY_OWNER || 'lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #737cb10940c34d37 — Environment-variable access.

repo/.github/scripts/auto-close-duplicates.ts:101

  const repo = process.env.GITHUB_REPOSITORY_NAME || 'lobe-chat';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #50267397652b1cb8 — Environment-variable access.

repo/.github/scripts/auto-handle-mcp-submission.ts:157

  const token = process.env.GITHUB_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d7e54691f41a08d4 — Environment-variable access.

repo/.github/scripts/auto-handle-mcp-submission.ts:160

  const owner = process.env.GITHUB_REPOSITORY_OWNER || 'lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f998b9e5297941ec — Environment-variable access.

repo/.github/scripts/auto-handle-mcp-submission.ts:161

  const repo = process.env.GITHUB_REPOSITORY_NAME || 'lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #22460d814b65cac3 — Environment-variable access.

repo/.github/scripts/auto-handle-mcp-submission.ts:162

  const issueNumber = Number(process.env.ISSUE_NUMBER);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #91b5c3a9cc795d68 — Environment-variable access.

repo/.github/scripts/create-failure-issue.js:13

    validateEnv: process.env.ERROR_VALIDATE_ENV || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #27eaca56ff91cb6b — Environment-variable access.

repo/.github/scripts/create-failure-issue.js:14

    rebaseAttempt: process.env.ERROR_REBASE_ATTEMPT || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9cb279e0046493d4 — Environment-variable access.

repo/.github/scripts/create-failure-issue.js:15

    createBranch: process.env.ERROR_CREATE_BRANCH || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8979b13cab8a5518 — Environment-variable access.

repo/.github/scripts/create-failure-issue.js:16

    installDeps: process.env.ERROR_INSTALL_DEPS || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #57fe1e5866c89dec — Environment-variable access.

repo/.github/scripts/create-failure-issue.js:17

    runI18n: process.env.ERROR_RUN_I18N || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #884dc4bdc33f2513 — Environment-variable access.

repo/.github/scripts/create-failure-issue.js:18

    commitPush: process.env.ERROR_COMMIT_PUSH || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #162de5262dc92066 — Environment-variable access.

repo/.github/scripts/create-failure-issue.js:23

    validateEnv: process.env.STEP_VALIDATE_ENV || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #65a6734160675202 — Environment-variable access.

repo/.github/scripts/create-failure-issue.js:24

    checkBranch: process.env.STEP_CHECK_BRANCH || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #583b09e52ab7d6e1 — Environment-variable access.

repo/.github/scripts/create-failure-issue.js:25

    rebaseAttempt: process.env.STEP_REBASE_ATTEMPT || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e447e6743053ea44 — Environment-variable access.

repo/.github/scripts/create-failure-issue.js:26

    createBranch: process.env.STEP_CREATE_BRANCH || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #eec1932fc836ccea — Environment-variable access.

repo/.github/scripts/create-failure-issue.js:27

    installDeps: process.env.STEP_INSTALL_DEPS || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #51ecc81a3e0ccf2f — Environment-variable access.

repo/.github/scripts/create-failure-issue.js:28

    runI18n: process.env.STEP_RUN_I18N || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4af31d24bbb19015 — Environment-variable access.

repo/.github/scripts/create-failure-issue.js:29

    commitPush: process.env.STEP_COMMIT_PUSH || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b8c23d384b3e4022 — Environment-variable access.

repo/.github/scripts/create-failure-issue.js:30

    createPr: process.env.STEP_CREATE_PR || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #bf1b2fe287aefa7a — Environment-variable access.

repo/.github/scripts/create-failure-issue.js:77

- **Runner OS:** ${process.env.RUNNER_OS || 'Unknown'}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #64ef205c50e449fd — Environment-variable access.

repo/.github/scripts/create-failure-issue.js:78

- **Bun Version:** ${process.env.BUN_VERSION || 'Default'}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #55feba070c0b5eb8 — Environment-variable access.

repo/.github/scripts/should-run-dedupe.ts:63

  const outputPath = process.env.GITHUB_OUTPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b153e86f20b749ae — Environment-variable access.

repo/.github/scripts/should-run-dedupe.ts:105

  const token = process.env.GITHUB_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #bf4857755cd77847 — Environment-variable access.

repo/.github/scripts/should-run-dedupe.ts:108

  const repository = process.env.GITHUB_REPOSITORY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #1444169dbc7e7b3c — Environment-variable access.

repo/.github/scripts/should-run-dedupe.ts:110

  const owner = process.env.GITHUB_REPOSITORY_OWNER || repositoryOwner || 'lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ec6dcf7fc927dd2a — Environment-variable access.

repo/.github/scripts/should-run-dedupe.ts:111

  const repo = process.env.GITHUB_REPOSITORY_NAME || repositoryName || 'lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #05f74f30b09c8237 — Environment-variable access.

repo/.github/scripts/should-run-dedupe.ts:112

  const issueNumber = Number(process.env.ISSUE_NUMBER);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #29ef0a82fdd25da3 — Filesystem access.

repo/.i18nrc.js:37

      fs.readFileSync(path.join(__dirname, 'docs/glossary.mdx'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #074a32dc55c6cc47 — Environment-variable access.

repo/apps/cli/e2e/agent-fs-vfs.e2e.test.ts:16

const AGENT_ID = process.env.AGENT_FS_E2E_AGENT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5e43ddd64c350870 — Environment-variable access.

repo/apps/cli/e2e/agent-fs-vfs.e2e.test.ts:17

const CLI = process.env.LH_CLI_PATH || 'LOBEHUB_CLI_HOME=.lobehub-dev bun src/index.ts';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c38e5842959155bf — Environment-variable access.

repo/apps/cli/e2e/agent-fs-vfs.e2e.test.ts:23

    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #62d97a889a56260b — Environment-variable access.

repo/apps/cli/e2e/agent-signal.e2e.test.ts:26

const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #09e242fd4551d9fa — Environment-variable access.

repo/apps/cli/e2e/agent-signal.e2e.test.ts:27

const AGENT_ID = process.env.AGENT_SIGNAL_AGENT_ID || process.env.AGENT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4f2efa6c50ef460e — Filesystem access.

repo/apps/cli/e2e/agent-signal.e2e.test.ts:33

const golden = JSON.parse(readFileSync(goldenPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9ddbb274a61c9344 — Environment-variable access.

repo/apps/cli/e2e/agent-signal.e2e.test.ts:38

    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #62f57b7a402dde62 — Environment-variable access.

repo/apps/cli/e2e/agent.e2e.test.ts:18

const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6422e154eb8b9586 — Environment-variable access.

repo/apps/cli/e2e/agent.e2e.test.ts:24

    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #76d2d89a5eb34781 — Environment-variable access.

repo/apps/cli/e2e/doc.e2e.test.ts:19

const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d3d03e9053c527b4 — Environment-variable access.

repo/apps/cli/e2e/doc.e2e.test.ts:25

    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a8b6bb54d66aaa58 — Filesystem access.

repo/apps/cli/e2e/doc.e2e.test.ts:146

      fs.writeFileSync(tmpFile, '# File Content\nFrom body-file flag');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #19ccea5f03990c84 — Filesystem access.

repo/apps/cli/e2e/doc.e2e.test.ts:197

      fs.writeFileSync(tmpFile, '# Created from file\nTest content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4b175c12b9c90721 — Filesystem access.

repo/apps/cli/e2e/doc.e2e.test.ts:229

      fs.writeFileSync(tmpFile, JSON.stringify(docs));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cf12d77066e915ec — Environment-variable access.

repo/apps/cli/e2e/file.e2e.test.ts:17

const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6de7c64b714ce7e4 — Environment-variable access.

repo/apps/cli/e2e/file.e2e.test.ts:23

    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #37687e9ff5457a0d — Filesystem access.

repo/apps/cli/e2e/file.e2e.test.ts:88

      fs.writeFileSync(tmpFile, 'hello from lh e2e upload');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #26e76771136c0b2a — Filesystem access.

repo/apps/cli/e2e/file.e2e.test.ts:101

      fs.writeFileSync(tmpFile, 'hello from lh e2e --file upload');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #658d56e7a1e53491 — Environment-variable access.

repo/apps/cli/e2e/generate.e2e.test.ts:14

const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #69ce8ac74371ef34 — Environment-variable access.

repo/apps/cli/e2e/generate.e2e.test.ts:20

    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8442f771b5f12c9d — Environment-variable access.

repo/apps/cli/e2e/kb.e2e.test.ts:19

const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6019a6665a4d09c7 — Environment-variable access.

repo/apps/cli/e2e/kb.e2e.test.ts:25

    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #981daae4fd50838d — Filesystem access.

repo/apps/cli/e2e/kb.e2e.test.ts:221

      fs.writeFileSync(tmpFile, 'E2E upload test content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1cf7876255a62ecb — Environment-variable access.

repo/apps/cli/e2e/memory.e2e.test.ts:16

const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d53cb8fa27b404fb — Environment-variable access.

repo/apps/cli/e2e/memory.e2e.test.ts:22

    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #651f97787d6b04c1 — Environment-variable access.

repo/apps/cli/e2e/message.e2e.test.ts:14

const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3d4aa62c0d3c348b — Environment-variable access.

repo/apps/cli/e2e/message.e2e.test.ts:20

    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ed18c6782bf56616 — Environment-variable access.

repo/apps/cli/e2e/model.e2e.test.ts:17

const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #52043a5f55daf5bf — Environment-variable access.

repo/apps/cli/e2e/model.e2e.test.ts:24

    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7c824bed853253eb — Environment-variable access.

repo/apps/cli/e2e/plugin.e2e.test.ts:14

const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #623ea9788da72937 — Environment-variable access.

repo/apps/cli/e2e/plugin.e2e.test.ts:20

    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cf4b5ad529f199bb — Environment-variable access.

repo/apps/cli/e2e/provider.e2e.test.ts:16

const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c0cb1f37f9c53a63 — Environment-variable access.

repo/apps/cli/e2e/provider.e2e.test.ts:22

    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f4f5b8f2aed2162a — Environment-variable access.

repo/apps/cli/e2e/search.e2e.test.ts:14

const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #99799435b33a272e — Environment-variable access.

repo/apps/cli/e2e/search.e2e.test.ts:20

    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2d0a3e4dce9e1657 — Environment-variable access.

repo/apps/cli/e2e/skill.e2e.test.ts:16

const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #df09fb38dcf571cc — Environment-variable access.

repo/apps/cli/e2e/skill.e2e.test.ts:22

    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3270753ed42702af — Environment-variable access.

repo/apps/cli/e2e/topic.e2e.test.ts:16

const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7f37b2b4d7b4bd13 — Environment-variable access.

repo/apps/cli/e2e/topic.e2e.test.ts:22

    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f560c7d10dc64d6a — Environment-variable access.

repo/apps/cli/src/api/client.ts:22

  const envJwt = process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ed842ada1f5ccf73 — Environment-variable access.

repo/apps/cli/src/api/client.ts:32

  const envApiKey = process.env[CLI_API_KEY_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a1663d31459f7b06 — Environment-variable access.

repo/apps/cli/src/api/http.test.ts:19

  const originalJwt = process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b1c9589c4e4e5a30 — Environment-variable access.

repo/apps/cli/src/api/http.test.ts:20

  const originalWorkspaceId = process.env.LOBEHUB_WORKSPACE_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea1391b8c16fc21d — Environment-variable access.

repo/apps/cli/src/api/http.test.ts:24

    delete process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #79239d0a004f0bfb — Environment-variable access.

repo/apps/cli/src/api/http.test.ts:25

    delete process.env.LOBEHUB_WORKSPACE_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6ce663a80c190b59 — Environment-variable access.

repo/apps/cli/src/api/http.test.ts:29

    if (originalJwt === undefined) delete process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fa0b6107fd5fbfd8 — Environment-variable access.

repo/apps/cli/src/api/http.test.ts:30

    else process.env.LOBEHUB_JWT = originalJwt;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7e10ac4e28659709 — Environment-variable access.

repo/apps/cli/src/api/http.test.ts:32

    if (originalWorkspaceId === undefined) delete process.env.LOBEHUB_WORKSPACE_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #713a8e6b6042cde1 — Environment-variable access.

repo/apps/cli/src/api/http.test.ts:33

    else process.env.LOBEHUB_WORKSPACE_ID = originalWorkspaceId;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3eb0d8ff6461a76f — Environment-variable access.

repo/apps/cli/src/api/http.test.ts:37

    process.env.LOBEHUB_JWT = 'env-jwt';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #40a8d3cdce22138f — Environment-variable access.

repo/apps/cli/src/api/http.test.ts:38

    process.env.LOBEHUB_WORKSPACE_ID = 'workspace-1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d2f85e223aed0f50 — Environment-variable access.

repo/apps/cli/src/api/http.test.ts:56

    process.env.LOBEHUB_WORKSPACE_ID = 'workspace-1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3c8152e4196ed8c9 — Environment-variable access.

repo/apps/cli/src/api/http.test.ts:71

    process.env.LOBEHUB_JWT = 'env-jwt';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f3eaa07168c49044 — Environment-variable access.

repo/apps/cli/src/api/http.test.ts:72

    process.env.LOBEHUB_WORKSPACE_ID = 'workspace-1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a6396edcf035c34d — Environment-variable access.

repo/apps/cli/src/api/http.ts:16

  const envJwt = process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c05f3fff587409e0 — Environment-variable access.

repo/apps/cli/src/api/http.ts:33

    if (process.env[CLI_API_KEY_ENV]) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0d1574a29e59988c — Environment-variable access.

repo/apps/cli/src/api/http.ts:80

  const envJwt = process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #731edeb21c7fe84a — Environment-variable access.

repo/apps/cli/src/api/http.ts:90

  const envApiKey = process.env[CLI_API_KEY_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ef72ec8ad57dfff5 — Environment-variable access.

repo/apps/cli/src/api/workspace.ts:10

  const fromEnv = process.env.LOBEHUB_WORKSPACE_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #67797c12a5e4793f — Filesystem access.

repo/apps/cli/src/auth/credentials.test.ts:63

      const raw = fs.readFileSync(credentialsFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #867fadce3bdc7859 — Filesystem access.

repo/apps/cli/src/auth/credentials.test.ts:93

      fs.writeFileSync(credentialsFile, JSON.stringify(testCredentials));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0ef519565e7fff54 — Filesystem access.

repo/apps/cli/src/auth/credentials.test.ts:100

      const raw = fs.readFileSync(credentialsFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5b7b3139bf4ed0cf — Filesystem access.

repo/apps/cli/src/auth/credentials.test.ts:106

      fs.writeFileSync(credentialsFile, 'not-valid-base64-or-json!!!');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8ce9fec4e7719d58 — Environment-variable access.

repo/apps/cli/src/auth/credentials.ts:12

const LOBEHUB_DIR_NAME = process.env.LOBEHUB_CLI_HOME || '.lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fa49259f73a5da91 — Filesystem access.

repo/apps/cli/src/auth/credentials.ts:48

  fs.writeFileSync(CREDENTIALS_FILE, encrypted, { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0c1f9aa0e79d0a31 — Filesystem access.

repo/apps/cli/src/auth/credentials.ts:53

    const data = fs.readFileSync(CREDENTIALS_FILE, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3838637bbfea80fd — Environment-variable access.

repo/apps/cli/src/auth/resolveToken.test.ts:16

    (process.env.LOBEHUB_SERVER || 'https://app.lobehub.com').replace(/\/$/, ''),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b7ee19980d491df5 — Environment-variable access.

repo/apps/cli/src/auth/resolveToken.test.ts:37

  const originalApiKey = process.env.LOBEHUB_CLI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9eb46467f1f1eca7 — Environment-variable access.

repo/apps/cli/src/auth/resolveToken.test.ts:38

  const originalJwt = process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ebaa717bc3c4879b — Environment-variable access.

repo/apps/cli/src/auth/resolveToken.test.ts:39

  const originalServer = process.env.LOBEHUB_SERVER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #37b86ce0c9c6700c — Environment-variable access.

repo/apps/cli/src/auth/resolveToken.test.ts:45

    delete process.env.LOBEHUB_CLI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e39512e9996b8039 — Environment-variable access.

repo/apps/cli/src/auth/resolveToken.test.ts:46

    delete process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #781f0bbc9494a44d — Environment-variable access.

repo/apps/cli/src/auth/resolveToken.test.ts:47

    delete process.env.LOBEHUB_SERVER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #23bda89c99452631 — Environment-variable access.

repo/apps/cli/src/auth/resolveToken.test.ts:51

    process.env.LOBEHUB_CLI_API_KEY = originalApiKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #61d58395a9b87c77 — Environment-variable access.

repo/apps/cli/src/auth/resolveToken.test.ts:52

    process.env.LOBEHUB_JWT = originalJwt;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5db30ef098f7df47 — Environment-variable access.

repo/apps/cli/src/auth/resolveToken.test.ts:53

    process.env.LOBEHUB_SERVER = originalServer;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e9596ee2f75b2dc4 — Environment-variable access.

repo/apps/cli/src/auth/resolveToken.test.ts:109

      process.env.LOBEHUB_CLI_API_KEY = 'sk-lh-test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #18a7cf7d562b00c9 — Environment-variable access.

repo/apps/cli/src/auth/resolveToken.test.ts:124

      process.env.LOBEHUB_CLI_API_KEY = 'sk-lh-test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3199789358c381c7 — Environment-variable access.

repo/apps/cli/src/auth/resolveToken.test.ts:125

      process.env.LOBEHUB_SERVER = 'https://self-hosted.example.com/';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c27b19c3314f08ad — Environment-variable access.

repo/apps/cli/src/auth/resolveToken.ts:38

  const envJwt = process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #395e609e31e7b43a — Environment-variable access.

repo/apps/cli/src/auth/resolveToken.ts:73

  const envApiKey = process.env[CLI_API_KEY_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0f572b000251fe1d — Filesystem access.

repo/apps/cli/src/commands/agent.test.ts:162

    await writeFile(graphFile, JSON.stringify(graph), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #19d2010304a4210f — Filesystem access.

repo/apps/cli/src/commands/agent.ts:22

  const content = await readFile(graphFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1a9979abe39591cc — Filesystem access.

repo/apps/cli/src/commands/agent/spaceFs.ts:275

    return readFileSync(options.contentFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3f2ca6e5e78a10b0 — Filesystem access.

repo/apps/cli/src/commands/botMessage.test.ts:99

    await writeFile(filePath, 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #693037cc5a239c4d — Filesystem access.

repo/apps/cli/src/commands/botMessage.ts:87

  const bytes = await readFile(raw);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cacd460fa91c681b — Environment-variable access.

repo/apps/cli/src/commands/completion.test.ts:8

  const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6b4139ed895d1155 — Environment-variable access.

repo/apps/cli/src/commands/completion.test.ts:16

    delete process.env.LOBEHUB_COMP_CWORD;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1334534bb1dff6ed — Environment-variable access.

repo/apps/cli/src/commands/completion.test.ts:17

    process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a7470d2d4f7ee0d8 — Environment-variable access.

repo/apps/cli/src/commands/completion.test.ts:39

    process.env.SHELL = '/bin/zsh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #869f7c0b82e0a23a — Environment-variable access.

repo/apps/cli/src/commands/completion.test.ts:58

    process.env.LOBEHUB_COMP_CWORD = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f7d293837dddba04 — Environment-variable access.

repo/apps/cli/src/commands/completion.test.ts:67

    process.env.LOBEHUB_COMP_CWORD = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #74e5550d397346c1 — Environment-variable access.

repo/apps/cli/src/commands/completion.test.ts:76

    process.env.LOBEHUB_COMP_CWORD = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e420c938d96345d2 — Environment-variable access.

repo/apps/cli/src/commands/completion.test.ts:85

    process.env.LOBEHUB_COMP_CWORD = '2';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #847f081a2c43f53a — Environment-variable access.

repo/apps/cli/src/commands/completion.test.ts:94

    process.env.LOBEHUB_COMP_CWORD = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #95971c3e079049e1 — Environment-variable access.

repo/apps/cli/src/commands/completion.ts:23

      const currentWordIndex = parseCompletionWordIndex(process.env.LOBEHUB_COMP_CWORD, words);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7fbd94a0cc943eaf — Environment-variable access.

repo/apps/cli/src/commands/connect.ts:106

      const isServiceChild = options.serviceChild || process.env.LOBEHUB_CONNECT_SERVICE === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3450284d899fc88d — Environment-variable access.

repo/apps/cli/src/commands/connect.ts:108

        options.daemonChild || isServiceChild || process.env.LOBEHUB_DAEMON === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7e6fc1279018b8c1 — Environment-variable access.

repo/apps/cli/src/commands/connect.ts:369

  const channel = process.env.LOBEHUB_CLI_CHANNEL || 'cli';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #28bdcb638507f6dd — Filesystem access.

repo/apps/cli/src/commands/doc.ts:18

    return fs.readFileSync(options.bodyFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #467eb61fab0ee28c — Filesystem access.

repo/apps/cli/src/commands/doc.ts:168

        const raw = fs.readFileSync(file, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #15d21cc05f555844 — Filesystem access.

repo/apps/cli/src/commands/file.test.ts:220

      fs.writeFileSync(tmpFile, 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6b7f8c5bc8eb15e2 — Filesystem access.

repo/apps/cli/src/commands/file.test.ts:257

      fs.writeFileSync(tmpFile, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2b1e3eeb27212e15 — Filesystem access.

repo/apps/cli/src/commands/file.test.ts:281

      fs.writeFileSync(tmpFile, 'dedup me');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3e0b4668e3028f7f — Filesystem access.

repo/apps/cli/src/commands/generate.test.ts:376

      await fsWriteFile(bigPath, Buffer.alloc(4 * 1024 * 1024));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aeec909090552ffd — Filesystem access.

repo/apps/cli/src/commands/generate/asr.ts:59

            await writeFile(tempPath, downloaded.bytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ebc9f2ad97f1abcb — Filesystem access.

repo/apps/cli/src/commands/generate/asr.ts:90

            const bytes = await readFile(localPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #01062d93cf9c2a0a — Filesystem access.

repo/apps/cli/src/commands/generate/tts.ts:54

        writeFileSync(options.output, buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4f6060b7c8c5735b — Filesystem access.

repo/apps/cli/src/commands/hetero.test.ts:434

    await writeFile(
      file,
      JSON.stringify([
        { text: 'analyze', type: 'text' },
        { source: { type: 'url', url: 'https://x/y.png' }, type: 'image' },
      ]),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ee8e96c445a68b38 — Filesystem access.

repo/apps/cli/src/commands/hetero.test.ts:1127

    const meta = JSON.parse(await readFile(path.join(sessionDir, 'meta.json'), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aba15f54bf1ec867 — Filesystem access.

repo/apps/cli/src/commands/hetero.test.ts:1131

    const stderrDump = await readFile(path.join(sessionDir, 'attempt-1.stderr.log'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #352d05d2d9404f7b — Filesystem access.

repo/apps/cli/src/commands/hetero.ts:141

  return readFile(location, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5cec1cc5077178ac — Filesystem access.

repo/apps/cli/src/commands/hetero.ts:388

      await writeFile(
        path.join(dir, 'meta.json'),
        `${JSON.stringify({ ...meta, operationId, startedAt: new Date().toISOString() }, null, 2)}\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #06364876ed14744b — Environment-variable access.

repo/apps/cli/src/commands/hetero.ts:494

      process.env.LOBEHUB_ASSISTANT_MESSAGE_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1793999718b59303 — Filesystem access.

repo/apps/cli/src/commands/hetero.ts:529

    await writeFile(
      askMcpConfigPath,
      JSON.stringify({
        mcpServers: {
          lobe_cc: {
            alwaysLoad: true,
            type: 'http',
            url: askServer.urlForOperation(operationId),
          },
        },
      }),
      'utf8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea35a0ea97494675 — Environment-variable access.

repo/apps/cli/src/commands/login.test.ts:44

  const originalApiKey = process.env.LOBEHUB_CLI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9c145b0e2a00b74b — Environment-variable access.

repo/apps/cli/src/commands/login.test.ts:45

  const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b855386ad0d2d110 — Environment-variable access.

repo/apps/cli/src/commands/login.test.ts:46

  const originalPathext = process.env.PATHEXT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1e8e994e5c1c12c5 — Environment-variable access.

repo/apps/cli/src/commands/login.test.ts:47

  const originalSystemRoot = process.env.SystemRoot;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2cd088dc1a9d1ba7 — Environment-variable access.

repo/apps/cli/src/commands/login.test.ts:54

    delete process.env.LOBEHUB_CLI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e88e23b26e268549 — Environment-variable access.

repo/apps/cli/src/commands/login.test.ts:60

    process.env.LOBEHUB_CLI_API_KEY = originalApiKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0f7a9792b7138ad8 — Environment-variable access.

repo/apps/cli/src/commands/login.test.ts:61

    process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2cef279623bce8c0 — Environment-variable access.

repo/apps/cli/src/commands/login.test.ts:62

    process.env.PATHEXT = originalPathext;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #00cc6345d95c9fbf — Environment-variable access.

repo/apps/cli/src/commands/login.test.ts:63

    process.env.SystemRoot = originalSystemRoot;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b6bf9275933fc03a — Environment-variable access.

repo/apps/cli/src/commands/login.test.ts:145

    process.env.LOBEHUB_CLI_API_KEY = 'sk-lh-env-test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #555961250a4699c0 — Environment-variable access.

repo/apps/cli/src/commands/login.test.ts:187

    process.env.LOBEHUB_CLI_API_KEY = 'sk-lh-env-test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6930107e32dec54c — Environment-variable access.

repo/apps/cli/src/commands/login.test.ts:346

    process.env.PATH = 'C:\\Tools';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d7b3a2b7ab833561 — Environment-variable access.

repo/apps/cli/src/commands/login.test.ts:347

    process.env.PATHEXT = '.EXE;.CMD';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d04c8c40cb431e63 — Environment-variable access.

repo/apps/cli/src/commands/login.test.ts:348

    process.env.SystemRoot = 'C:\\Windows';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3f962f6f8ded13e4 — Environment-variable access.

repo/apps/cli/src/commands/login.ts:65

      const apiKey = process.env[CLI_API_KEY_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f9bfcb65ce53c335 — Environment-variable access.

repo/apps/cli/src/commands/login.ts:270

  const pathValue = process.env.PATH || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #03ff0fd26794547f — Environment-variable access.

repo/apps/cli/src/commands/login.ts:275

    const pathext = (process.env.PATHEXT || '.COM;.EXE;.BAT;.CMD').split(';').filter(Boolean);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #50ee345403e7e1f2 — Environment-variable access.

repo/apps/cli/src/commands/login.ts:280

    const systemRoot = process.env.SystemRoot || process.env.WINDIR;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #455bc48671da0e74 — Filesystem access.

repo/apps/cli/src/commands/migrate/openclaw.test.ts:71

  fs.writeFileSync(fullPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c14f9b0aedd608d3 — Filesystem access.

repo/apps/cli/src/commands/migrate/openclaw.test.ts:277

      fs.writeFileSync(binPath, Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x00, 0x00, 0x01]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bc32862149463e7a — Filesystem access.

repo/apps/cli/src/commands/migrate/openclaw.ts:198

    const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bae4902eefabb9f7 — Filesystem access.

repo/apps/cli/src/commands/migrate/openclaw.ts:231

    ig.add(fs.readFileSync(gitignorePath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #de8dee80ca52481a — Filesystem access.

repo/apps/cli/src/commands/migrate/openclaw.ts:432

            const content = fs.readFileSync(fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2fe7d201f207c818 — Filesystem access.

repo/apps/cli/src/commands/topic.ts:148

        const content = fs.readFileSync(options.file, 'utf8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8cf4f049244335c1 — Environment-variable access.

repo/apps/cli/src/commands/update.ts:31

  const ua = process.env.npm_config_user_agent;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #96b9ea71668312c7 — Filesystem access.

repo/apps/cli/src/commands/verify.test.ts:209

    expect(readFileSync(path.join(skillDir, 'SKILL.md'), 'utf8')).toBe('# Verify SKILL');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2a12e1a11b8f236d — Filesystem access.

repo/apps/cli/src/commands/verify.test.ts:210

    expect(readFileSync(path.join(skillDir, 'references/plan-format.md'), 'utf8')).toBe('plan');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b642a88a87cd4b71 — Filesystem access.

repo/apps/cli/src/commands/verify.test.ts:211

    expect(readFileSync(path.join(skillDir, 'surfaces/cli.md'), 'utf8')).toBe('cli');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8d7480219b1d67c3 — Filesystem access.

repo/apps/cli/src/commands/verify.test.ts:227

    expect(readFileSync(skillFile, 'utf8')).toBe('# Verify SKILL');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0f69c2ecce4d6d8f — Filesystem access.

repo/apps/cli/src/commands/verify.test.ts:230

    expect(readFileSync(skillFile, 'utf8')).toBe('# Updated SKILL');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #86cbe8bd5c97c20e — Environment-variable access.

repo/apps/cli/src/commands/verify.test.ts:444

    process.env.LOBEHUB_AGENT_ID = 'agt_1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9a0cdac0889de033 — Environment-variable access.

repo/apps/cli/src/commands/verify.test.ts:445

    process.env.LOBEHUB_TOPIC_ID = 'tpc_1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #344f2211bd6c432e — Environment-variable access.

repo/apps/cli/src/commands/verify.test.ts:446

    process.env.LOBEHUB_OPERATION_ID = 'op_1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d832b8ef1b67823b — Environment-variable access.

repo/apps/cli/src/commands/verify.test.ts:459

    process.env.LOBEHUB_OPERATION_ID = 'op_authoring_run';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #69ea5b140a38d72a — Environment-variable access.

repo/apps/cli/src/commands/verify.test.ts:467

    delete process.env.LOBEHUB_AGENT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f11caf0eabc217ab — Environment-variable access.

repo/apps/cli/src/commands/verify.test.ts:468

    delete process.env.LOBEHUB_TOPIC_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #94d9e853010544da — Environment-variable access.

repo/apps/cli/src/commands/verify.test.ts:469

    delete process.env.LOBEHUB_OPERATION_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a5507f106ced39cb — Filesystem access.

repo/apps/cli/src/commands/verify.ts:76

    const buffer = readFileSync(file);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1754f2d0866b5103 — Environment-variable access.

repo/apps/cli/src/commands/verify.ts:358

    agentId: firstString(process.env.LOBEHUB_AGENT_ID),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #12477cc1e8726182 — Environment-variable access.

repo/apps/cli/src/commands/verify.ts:359

    operationId: firstString(process.env.LOBEHUB_OPERATION_ID),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b2e5563041107daa — Environment-variable access.

repo/apps/cli/src/commands/verify.ts:360

    topicId: firstString(process.env.LOBEHUB_TOPIC_ID),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f04cb6639a626450 — Filesystem access.

repo/apps/cli/src/commands/verify.ts:407

    const parsed = JSON.parse(readFileSync(p, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1675cd08100d3ec7 — Filesystem access.

repo/apps/cli/src/commands/verify.ts:416

    writeFileSync(path.join(dir, RUN_SIDECAR), `${JSON.stringify({ verifyRunId }, null, 2)}\n`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3b8fe969ca1e807d — Filesystem access.

repo/apps/cli/src/commands/verify.ts:466

          writeFileSync(dest, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4dd76e97c519abbb — Filesystem access.

repo/apps/cli/src/commands/verify.ts:1313

          result = JSON.parse(readFileSync(resultPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c736a53d9a7f959d — Filesystem access.

repo/apps/cli/src/commands/verify.ts:1322

        const content = existsSync(reportMdPath) ? readFileSync(reportMdPath, 'utf8') : undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #34630f09118ea967 — Filesystem access.

repo/apps/cli/src/daemon/manager.test.ts:72

      await writeFile(path.join(mockDir, 'daemon.pid'), 'not-a-number');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ceb70730ced858e3 — Filesystem access.

repo/apps/cli/src/daemon/manager.test.ts:217

      const content = fs.readFileSync(getLogPath(), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fa6cd1c2d50dde7e — Filesystem access.

repo/apps/cli/src/daemon/manager.test.ts:228

      await writeFile(logPath, bigContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0e867bfb222f0b3e — Filesystem access.

repo/apps/cli/src/daemon/manager.test.ts:240

      await writeFile(logPath, 'small content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #abc4c0f59512aab7 — Filesystem access.

repo/apps/cli/src/daemon/manager.test.ts:245

      expect(fs.readFileSync(logPath, 'utf8')).toBe('small content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #babbc9a1c76f8042 — Filesystem access.

repo/apps/cli/src/daemon/manager.ts:40

    const raw = fs.readFileSync(getPidPath(), 'utf8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7160917b27530f8f — Filesystem access.

repo/apps/cli/src/daemon/manager.ts:50

  fs.writeFileSync(getPidPath(), String(pid), { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e7f00324e1b7364c — Filesystem access.

repo/apps/cli/src/daemon/manager.ts:123

  fs.writeFileSync(getStatusPath(), JSON.stringify(status, null, 2), { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #787314152af031bf — Filesystem access.

repo/apps/cli/src/daemon/manager.ts:128

    return JSON.parse(fs.readFileSync(getStatusPath(), 'utf8')) as DaemonStatus;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #02a79940ab0ab3eb — Filesystem access.

repo/apps/cli/src/daemon/taskRegistry.ts:26

    return JSON.parse(fs.readFileSync(getRegistryPath(), 'utf8')) as Record<string, TaskEntry>;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #399613edf6d4227f — Filesystem access.

repo/apps/cli/src/daemon/taskRegistry.ts:35

  fs.writeFileSync(getRegistryPath(), JSON.stringify(entries, null, 2), { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #115d16cce058ceea — Filesystem access.

repo/apps/cli/src/man/generate.ts:14

  writeFile(`${outputDir}lh.1`, generateRootManPage(program, cliVersion)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1fd3bc803b0b1191 — Filesystem access.

repo/apps/cli/src/man/generate.ts:15

  writeFile(`${outputDir}lobe.1`, generateAliasManPage('lh')),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3fdac59c82a36b48 — Filesystem access.

repo/apps/cli/src/man/generate.ts:16

  writeFile(`${outputDir}lobehub.1`, generateAliasManPage('lh')),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cad1b88142bde20f — Filesystem access.

repo/apps/cli/src/service/connect.test.ts:52

    fs.writeFileSync(entryPath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #abdc868665be19be — Environment-variable access.

repo/apps/cli/src/service/connect.test.ts:60

    delete process.env.LOBEHUB_CLI_HOME;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #074a9c7cd1c72eb5 — Environment-variable access.

repo/apps/cli/src/service/connect.test.ts:61

    delete process.env.LOBEHUB_CLI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #61647ee2dda4ba30 — Environment-variable access.

repo/apps/cli/src/service/connect.test.ts:62

    delete process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #696df976e8f59f91 — Environment-variable access.

repo/apps/cli/src/service/connect.test.ts:63

    delete process.env.ANTHROPIC_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #60e44664faade36b — Environment-variable access.

repo/apps/cli/src/service/connect.test.ts:64

    delete process.env.AWS_SECRET_ACCESS_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b0bea7c4b8218ebe — Filesystem access.

repo/apps/cli/src/service/connect.test.ts:103

    expect(fs.readFileSync(unitPath, 'utf8')).toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a4b3b62cb8788abc — Filesystem access.

repo/apps/cli/src/service/connect.test.ts:106

    expect(fs.readFileSync(unitPath, 'utf8')).toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3f1588a118a9badc — Environment-variable access.

repo/apps/cli/src/service/connect.test.ts:142

    process.env.ANTHROPIC_API_KEY = 'anthropic-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2afda098b3201fbe — Environment-variable access.

repo/apps/cli/src/service/connect.test.ts:143

    process.env.AWS_SECRET_ACCESS_KEY = 'aws-secret';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e33ff2bfb83b58e7 — Environment-variable access.

repo/apps/cli/src/service/connect.test.ts:144

    process.env.LOBEHUB_CLI_API_KEY = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #687e29228c6d3737 — Environment-variable access.

repo/apps/cli/src/service/connect.test.ts:145

    process.env.QUOTED_ENV = 'value with "quotes", \\slashes, and $dollars';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5e29080d39979942 — Filesystem access.

repo/apps/cli/src/service/connect.test.ts:150

    const envFile = fs.readFileSync(envFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #50f3f14712b19e2e — Environment-variable access.

repo/apps/cli/src/service/connect.test.ts:168

    process.env.LOBEHUB_CLI_API_KEY = 'rotated-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a4514e0667a94613 — Filesystem access.

repo/apps/cli/src/service/connect.test.ts:172

    expect(fs.readFileSync(path.join(tmpDir, '.lobehub', 'connect-service.env'), 'utf8')).toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b27c12adb8a83697 — Environment-variable access.

repo/apps/cli/src/service/connect.ts:35

    process.env.LOBEHUB_CONNECT_SERVICE_UNIT_DIR ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f97008d8d88058bc — Environment-variable access.

repo/apps/cli/src/service/connect.ts:41

  return path.join(os.homedir(), process.env.LOBEHUB_CLI_HOME || '.lobehub');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #96e0fd28c606ae13 — Filesystem access.

repo/apps/cli/src/service/connect.ts:144

  fs.writeFileSync(envFilePath, `${lines.join('\n')}\n`, { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #433d34d1571c020f — Environment-variable access.

repo/apps/cli/src/service/connect.ts:162

  if (process.env.LOBEHUB_JWT || process.env[CLI_API_KEY_ENV] || loadCredentials()) return;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ca75de939ee4d64b — Filesystem access.

repo/apps/cli/src/service/connect.ts:176

  fs.writeFileSync(path.join(getUserServiceDir(), SERVICE_NAME), renderUnit(), { mode: 0o644 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a181e3b9f1d464af — Environment-variable access.

repo/apps/cli/src/settings/index.test.ts:19

const originalServer = process.env.LOBEHUB_SERVER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0128c4aeea7a0460 — Environment-variable access.

repo/apps/cli/src/settings/index.test.ts:41

    delete process.env.LOBEHUB_SERVER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dd8347b3bbe38b9b — Environment-variable access.

repo/apps/cli/src/settings/index.test.ts:46

    process.env.LOBEHUB_SERVER = originalServer;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3ace1820ef9cc93e — Filesystem access.

repo/apps/cli/src/settings/index.test.ts:71

    fs.writeFileSync(settingsFile, '{invalid json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dca1996ba7083c25 — Environment-variable access.

repo/apps/cli/src/settings/index.test.ts:86

    process.env.LOBEHUB_SERVER = 'https://env.example.com/';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d257c2fa7720384f — Environment-variable access.

repo/apps/cli/src/settings/index.ts:15

const LOBEHUB_DIR_NAME = process.env.LOBEHUB_CLI_HOME || '.lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #594394d9975f3105 — Environment-variable access.

repo/apps/cli/src/settings/index.ts:31

  const envServerUrl = normalizeUrl(process.env.LOBEHUB_SERVER);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6cb873174be98eb7 — Environment-variable access.

repo/apps/cli/src/settings/index.ts:38

  const envUrl = normalizeUrl(process.env.AGENT_GATEWAY_URL);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #df86301d1c49349d — Filesystem access.

repo/apps/cli/src/settings/index.ts:64

  fs.writeFileSync(SETTINGS_FILE, JSON.stringify(normalized, null, 2), { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6adeba37b863b110 — Filesystem access.

repo/apps/cli/src/settings/index.ts:76

    const existing = fs.readFileSync(CONNECTION_ID_FILE, 'utf8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bdc6829c1c578130 — Filesystem access.

repo/apps/cli/src/settings/index.ts:85

    fs.writeFileSync(CONNECTION_ID_FILE, id, { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #32c8ed832bebeda3 — Filesystem access.

repo/apps/cli/src/settings/index.ts:99

    const data = fs.readFileSync(WORKSPACE_ENROLLMENTS_FILE, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2da2dcf9c4fe9e31 — Filesystem access.

repo/apps/cli/src/settings/index.ts:115

    fs.writeFileSync(WORKSPACE_ENROLLMENTS_FILE, JSON.stringify(workspaceIds, null, 2), {
      mode: 0o600,
    });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8e4d87adbfb00cb7 — Filesystem access.

repo/apps/cli/src/settings/index.ts:139

    const data = fs.readFileSync(SETTINGS_FILE, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7301be8785a59aea — Filesystem access.

repo/apps/cli/src/tools/file.test.ts:40

    await writeFile(filePath, 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e3618601e87916a2 — Filesystem access.

repo/apps/cli/src/tools/file.test.ts:54

    expect(fs.readFileSync(filePath, 'utf8')).toBe('written');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #493b0176f4a148fc — Filesystem access.

repo/apps/cli/src/tools/file.test.ts:59

    await writeFile(filePath, 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #93ad912152f45526 — Filesystem access.

repo/apps/cli/src/tools/file.test.ts:72

    await writeFile(path.join(tmpDir, 'a.txt'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #50b75ec8c2505376 — Filesystem access.

repo/apps/cli/src/tools/file.test.ts:80

    await writeFile(path.join(tmpDir, 'a.ts'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9b0423805791e092 — Filesystem access.

repo/apps/cli/src/tools/file.test.ts:81

    await writeFile(path.join(tmpDir, 'b.js'), 'b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a7a83d84ceac531d — Filesystem access.

repo/apps/cli/src/tools/file.test.ts:90

    await writeFile(path.join(tmpDir, 'search.txt'), 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8a2118053c9b4443 — Filesystem access.

repo/apps/cli/src/tools/file.test.ts:99

    await writeFile(path.join(tmpDir, 'config.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #56495e34d8019d44 — Filesystem access.

repo/apps/cli/src/tools/getAgentProfile.ts:32

    const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #92ae8118f77a068d — Filesystem access.

repo/apps/cli/src/tools/getAgentProfile.ts:126

    const content = fs.readFileSync(soulPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bf58342cf8dcaf40 — Environment-variable access.

repo/apps/cli/src/tools/heteroTask.ts:16

const LOBEHUB_DIR_NAME = process.env.LOBEHUB_CLI_HOME || '.lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #666b337a3d3d0c5d — Filesystem access.

repo/apps/cli/src/tools/heteroTask.ts:21

    const data = JSON.parse(fs.readFileSync(HERMES_SESSIONS_FILE, 'utf8')) as Record<

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #88269c88e100c2fa — Filesystem access.

repo/apps/cli/src/tools/heteroTask.ts:34

    data = JSON.parse(fs.readFileSync(HERMES_SESSIONS_FILE, 'utf8')) as Record<string, string>;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fef72f47c2d62e5b — Filesystem access.

repo/apps/cli/src/tools/heteroTask.ts:40

  fs.writeFileSync(HERMES_SESSIONS_FILE, JSON.stringify(data), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c4ff13fe80444316 — Environment-variable access.

repo/apps/cli/src/tools/heteroTask.ts:171

    const openclawAgent = process.env.OPENCLAW_AGENT_ID ?? 'main';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2195c230b168239a — Filesystem access.

repo/apps/cli/src/tools/index.test.ts:35

    await writeFile(filePath, 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a07b70e996254a75 — Filesystem access.

repo/apps/cli/src/tools/index.test.ts:56

    expect(fs.readFileSync(filePath, 'utf8')).toBe('written');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a87403a6a7798a10 — Filesystem access.

repo/apps/cli/src/tools/index.test.ts:61

    await writeFile(filePath, 'legacy hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #19d415c0e2ac3066 — Filesystem access.

repo/apps/cli/src/tools/index.test.ts:114

    await writeFile(filePath, 'old content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #99e8a0ddfbeb98aa — Filesystem access.

repo/apps/cli/src/tools/index.test.ts:127

    expect(fs.readFileSync(filePath, 'utf8')).toBe('new content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f9f9093ce6694b1a — Filesystem access.

repo/apps/cli/src/tools/index.test.ts:139

    await writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #73071b7a603d6bda — Filesystem access.

repo/apps/cli/src/tools/index.test.ts:157

    await writeFile(path.join(tmpDir, 'grep.txt'), `${pattern} here`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3e4dc0e60501ddfd — Environment-variable access.

repo/apps/cli/src/tools/isolatedWorker.ts:8

  ISOLATED_TOOL_APIS.has(apiName) && process.env[TOOL_WORKER_ENV] !== '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #132f723e7e8d9a55 — Filesystem access.

repo/apps/cli/src/tools/localSystemRuntime.ts:141

      return runtime.readFile({
        endLine: p.loc?.[1],
        path: p.path,
        startLine: p.loc?.[0],
      });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #97fd4675c3d407fd — Filesystem access.

repo/apps/cli/src/tools/localSystemRuntime.ts:149

      return runtime.writeFile(args as WriteFileParams);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1f9272fdc4dd9d1a — Environment-variable access.

repo/apps/cli/src/utils/completion.ts:120

  const fallbackShell = process.env.SHELL?.split('/').pop() || 'zsh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ad4d5c33a85dcbe0 — Filesystem access.

repo/apps/cli/src/utils/uploadLocalFile.ts:143

  const fileBuffer = fs.readFileSync(resolved);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #330b6dd90b300749 — Environment-variable access.

repo/apps/cli/tsdown.config.ts:12

  minify: !!process.env.MINIFY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #414138bd86c56272 — Filesystem access.

repo/apps/desktop/electron-builder.mjs:24

const packageJSON = JSON.parse(await fs.readFile(path.join(__dirname, 'package.json'), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #29af8446ac3e5d65 — Environment-variable access.

repo/apps/desktop/electron-builder.mjs:26

const channel = process.env.UPDATE_CHANNEL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea5f68e70e7262cb — Environment-variable access.

repo/apps/desktop/electron-builder.mjs:28

const hasAppleCertificate = Boolean(process.env.CSC_LINK);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4f01c9219e4c078e — Environment-variable access.

repo/apps/desktop/electron-builder.mjs:31

const updateServerUrl = process.env.UPDATE_SERVER_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #39fda3b442596228 — Environment-variable access.

repo/apps/desktop/electron-builder.mjs:82

  process.env.CSC_IDENTITY_AUTO_DISCOVERY = 'false';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8ce3ca16df9f05ae — Filesystem access.

repo/apps/desktop/electron-builder.mjs:132

      await fs.readFile(path.resolve(__dirname, '../cli/package.json'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c49b25349291d8c8 — Filesystem access.

repo/apps/desktop/electron-builder.mjs:134

    await fs.writeFile(
      path.resolve(__dirname, 'resources/cli-package.json'),
      JSON.stringify({ name: cliPkg.name, type: 'module', version: cliPkg.version }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b87e555c0d894e41 — Environment-variable access.

repo/apps/desktop/electron-builder.mjs:326

    releaseNotes: process.env.RELEASE_NOTES || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8b1b71b68d8fb848 — Environment-variable access.

repo/apps/desktop/electron.vite.config.ts:24

const DEV_VITE_PORT = Number(process.env.LOBE_DESKTOP_VITE_PORT) || 5173;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e8be10111654cbf2 — Filesystem access.

repo/apps/desktop/electron.vite.config.ts:183

      return injectDynamicBusinessFeatureFlag(readFileSync(sourcePath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b9d89e1d89318ff3 — Environment-variable access.

repo/apps/desktop/electron.vite.config.ts:200

const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #82e6a771a3f0bd0a — Environment-variable access.

repo/apps/desktop/electron.vite.config.ts:203

const isCloudDesktopBuild = process.env.CLOUD_DESKTOP === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #75f7d06f3b53b399 — Environment-variable access.

repo/apps/desktop/electron.vite.config.ts:204

const mode = process.env.NODE_ENV === 'production' ? 'production' : 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d0172585143e9867 — Environment-variable access.

repo/apps/desktop/electron.vite.config.ts:207

const updateChannel = process.env.UPDATE_CHANNEL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #53ea04bc2e0247ec — Filesystem access.

repo/apps/desktop/electron.vite.config.ts:209

  readFileSync(path.resolve(__dirname, 'package.json'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #85e0a38f759cd96d — Environment-variable access.

repo/apps/desktop/electron.vite.config.ts:218

  process.env.DESKTOP_EXTERNAL_NAVIGATION_HOSTS ?? (isCloudDesktopBuild ? 'stripe.com' : '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2dd0684b562374f3 — Environment-variable access.

repo/apps/desktop/electron.vite.config.ts:291

      'process.env.UPDATE_CHANNEL': JSON.stringify(process.env.UPDATE_CHANNEL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d9b0b7e22a8db0d9 — Environment-variable access.

repo/apps/desktop/electron.vite.config.ts:292

      'process.env.UPDATE_SERVER_URL': JSON.stringify(process.env.UPDATE_SERVER_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f6a6084eb5348213 — Filesystem access.

repo/apps/desktop/module-deps.config.mjs:31

    const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #17bebc2059a96332 — Environment-variable access.

repo/apps/desktop/native-deps.config.mjs:27

  return process.env.npm_config_platform || os.platform();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e87428cc32b3113c — Environment-variable access.

repo/apps/desktop/scripts/fix-electron-runtime.mjs:58

  const configuredArch = process.env.npm_config_arch;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d08e89e0ee80ce23 — Filesystem access.

repo/apps/desktop/scripts/fix-electron-runtime.mjs:76

    const installedVersion = readFileSync(
      path.join(electronDir, 'dist', 'version'),
      'utf8',
    ).replace(/^v/, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c65864eebc1ef16c — Filesystem access.

repo/apps/desktop/scripts/fix-electron-runtime.mjs:80

    const installedPath = readFileSync(path.join(electronDir, 'path.txt'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0328b32be203a89f — Environment-variable access.

repo/apps/desktop/scripts/fix-electron-runtime.mjs:135

  const platform = process.env.npm_config_platform || process.platform;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2db50835d2517f11 — Environment-variable access.

repo/apps/desktop/scripts/fix-electron-runtime.mjs:153

    cacheRoot: process.env.electron_config_cache,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #69a24e88fd3c2fee — Environment-variable access.

repo/apps/desktop/scripts/fix-electron-runtime.mjs:155

      process.env.electron_use_remote_checksums ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bad3fefd78f28eaa — Environment-variable access.

repo/apps/desktop/scripts/fix-electron-runtime.mjs:156

      process.env.npm_config_electron_use_remote_checksums

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bc945e49b5fb8fb2 — Filesystem access.

repo/apps/desktop/scripts/fix-electron-runtime.mjs:168

  writeFileSync(path.join(electronDir, 'path.txt'), platformPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #539b90ffe852be65 — Filesystem access.

repo/apps/desktop/scripts/i18nWorkflow/utils.ts:9

  const data = readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b51887d749e2f896 — Filesystem access.

repo/apps/desktop/scripts/i18nWorkflow/utils.ts:15

  writeFileSync(filePath, jsonStr, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #082c89b9ff9d519a — Environment-variable access.

repo/drizzle.config.ts:10

let connectionString = process.env.DATABASE_URL!;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #98a44c4a4809b4d6 — Environment-variable access.

repo/next.config.ts:3

const isVercel = !!process.env.VERCEL_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #978731dcfdff1603 — Filesystem access.

repo/plugins/vite/envRestartKeys.ts:36

      for (const line of readFileSync(file, 'utf8').split('\n')) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #081a8a698c31a495 — Filesystem access.

repo/plugins/vite/markdownImport.test.ts:15

    await writeFile(markdownPath, markdownContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f2c23eed6be98c7f — Filesystem access.

repo/plugins/vite/markdownImport.ts:35

      const content = await readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fa8d89deb67314f8 — Environment-variable access.

repo/plugins/vite/routeChunkPreload.ts:387

function appendDeploymentQuery(href: string, deploymentId = process.env.VERCEL_DEPLOYMENT_ID) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3d4a91f5b336ed2a — Environment-variable access.

repo/plugins/vite/routeChunkPreload.ts:566

        const deploymentId = process.env.VERCEL_DEPLOYMENT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4a975e6a1e71d570 — Environment-variable access.

repo/plugins/vite/sharedRendererConfig.ts:199

const isDev = process.env.NODE_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c6c16e812277eabf — Environment-variable access.

repo/plugins/vite/sharedRendererConfig.ts:200

const enableRouteChunkPreload = process.env.LOBE_ROUTE_CHUNK_PRELOAD !== 'false';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #775c8ad5d885c812 — Environment-variable access.

repo/plugins/vite/sharedRendererConfig.ts:241

    '__CI__': process.env.CI === 'true' ? 'true' : 'false',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #77ed184d2404aa64 — Environment-variable access.

repo/plugins/vite/sharedRendererConfig.ts:242

    '__DEV__': process.env.NODE_ENV !== 'production' ? 'true' : 'false',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2a315bc202967526 — Environment-variable access.

repo/plugins/vite/sharedRendererConfig.ts:245

    '__REACT_SCAN__': process.env.REACT_SCAN === 'true' ? 'true' : 'false',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #826c35b083534493 — Environment-variable access.

repo/plugins/vite/vercelSkewProtection.ts:28

  const id = deploymentId || process.env.VERCEL_DEPLOYMENT_ID || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #84239b9bd4672ee6 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.js:35

        (key) => process.env[key],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #279e12bf95a97204 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.js:54

      ].filter((key) => process.env[key]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #30066a95f871b5d2 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.js:59

    getVars: () => (process.env['NEXT_PUBLIC_SERVICE_MODE'] ? ['NEXT_PUBLIC_SERVICE_MODE'] : []),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #69f674b71eb9a194 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.js:65

    getVars: () => (process.env['ACCESS_CODE'] ? ['ACCESS_CODE'] : []),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7ef300fadacfa4d4 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.js:72

      process.env['NEXT_PUBLIC_ENABLE_BETTER_AUTH'] ? ['NEXT_PUBLIC_ENABLE_BETTER_AUTH'] : [],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #38b34ce97a9b76c4 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.js:78

    getVars: () => ['NEXT_PUBLIC_AUTH_URL', 'AUTH_URL'].filter((key) => process.env[key]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #826df2af50029137 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.js:104

      ].filter((key) => process.env[key]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e13e821efe2351e9 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.js:120

        (key) => process.env[key],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0ee565cce84e0579 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.js:127

    getVars: () => (process.env['OIDC_JWKS_KEY'] ? ['OIDC_JWKS_KEY'] : []),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d54bfb1ed2f1ec59 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.js:133

    getVars: () => (process.env['APP_URL']?.endsWith('/') ? ['APP_URL'] : []),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a1a692d8df486f94 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.js:141

      const providers = process.env['AUTH_SSO_PROVIDERS'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3677f2acd812fe23 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.js:142

      if (providers.includes('casdoor') && !process.env['CASDOOR_WEBHOOK_SECRET']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #14c643fccc7bbfd6 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.js:155

      const providers = process.env['AUTH_SSO_PROVIDERS'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3ad12e63e154cc1b — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.js:156

      if (providers.includes('logto') && !process.env['LOGTO_WEBHOOK_SIGNING_KEY']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a2a2ec15c28e1270 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.js:183

      ].filter((key) => process.env[key]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #995150ac29808edd — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.js:192

        process.env['SMTP_HOST'] || process.env['EMAIL_SERVICE_PROVIDER'] === 'resend';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fd868c4e78a25223 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.js:193

      const hasEmailVerification = process.env['AUTH_EMAIL_VERIFICATION'] === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f7f1d6188d15a503 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.test.ts:35

    process.env.NEXT_AUTH_SECRET = 'test-secret';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ca0f641489076ed2 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.test.ts:45

    process.env.NEXTAUTH_SECRET = 'test-secret';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a057baf4fd529138 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.test.ts:54

    process.env.CLERK_SECRET_KEY = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cbcb9543c5ce2438 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.test.ts:63

    process.env.ACCESS_CODE = 'test-code';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #23b8fcb3c57ac46b — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.test.ts:72

    process.env.APP_URL = 'https://example.com/';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f2808ee0eb3cf7a8 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.test.ts:81

    process.env.APP_URL = 'https://example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4c8424f5372f99d2 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.test.ts:91

      process.env.AUTH_SSO_PROVIDERS = 'casdoor';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #30cfa73fda2167b3 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.test.ts:102

      process.env.AUTH_SSO_PROVIDERS = 'logto';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #787508d13ad4febd — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.test.ts:113

      process.env.AUTH_SSO_PROVIDERS = 'casdoor';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e7d53c4689952ba1 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.test.ts:114

      process.env.CASDOOR_WEBHOOK_SECRET = 'test-secret';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e73f161880fabad6 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.test.ts:124

      process.env.AUTH_SSO_PROVIDERS = 'logto';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fddf5c6f68e955a0 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.test.ts:125

      process.env.LOGTO_WEBHOOK_SIGNING_KEY = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3ff82ac5d528d855 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.test.ts:135

      process.env.AUTH_SSO_PROVIDERS = 'google';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3ab9eb139ba45936 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.test.ts:147

      process.env.AUTH_SSO_PROVIDERS = 'logto'; // warning

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #186043b1aded7e0a — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.test.ts:148

      process.env.ACCESS_CODE = 'test-code'; // error

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #29a641a9892d773f — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.test.ts:161

      process.env.ACCESS_CODE = 'test-code';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ccd3039a6f3b96f9 — Environment-variable access.

repo/scripts/_shared/checkDeprecatedAuth.test.ts:171

      process.env.ACCESS_CODE = 'test-code';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #682b5abb9085b13d — Filesystem access.

repo/scripts/cdnWorkflow/index.ts:47

      this.cache = JSON.parse(readFileSync(CACHE_FILE, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5fe5376f3cd4754f — Filesystem access.

repo/scripts/cdnWorkflow/index.ts:56

      writeFileSync(CACHE_FILE, JSON.stringify(this.cache, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0b05ee8d81632418 — Filesystem access.

repo/scripts/cdnWorkflow/index.ts:65

      const mdx = readFileSync(post, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4c11de7af5b1953f — Environment-variable access.

repo/scripts/cdnWorkflow/index.ts:119

        cdnLinks[link] = cdnUrl.replaceAll(process.env.DOC_S3_PUBLIC_DOMAIN || '', '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d68259d25bb0e264 — Filesystem access.

repo/scripts/cdnWorkflow/index.ts:147

      const mdx = readFileSync(post, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b8ebfe5f3a3976ef — Filesystem access.

repo/scripts/cdnWorkflow/index.ts:170

      writeFileSync(post, matter.stringify(content, data));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2f63f05df02e13b9 — Environment-variable access.

repo/scripts/cdnWorkflow/uploader.ts:10

if (!process.env.DOC_S3_ACCESS_KEY_ID) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #857cfa1ab9e9348e — Environment-variable access.

repo/scripts/cdnWorkflow/uploader.ts:16

if (!process.env.DOC_S3_SECRET_ACCESS_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9132559152255390 — Environment-variable access.

repo/scripts/cdnWorkflow/uploader.ts:22

if (!process.env.DOC_S3_PUBLIC_DOMAIN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0741976ecca3effd — Environment-variable access.

repo/scripts/cdnWorkflow/uploader.ts:44

    accessKeyId: process.env.DOC_S3_ACCESS_KEY_ID || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #47059f6424e6a37f — Environment-variable access.

repo/scripts/cdnWorkflow/uploader.ts:47

    pathPrefix: process.env.DOC_S3_PUBLIC_DOMAIN || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9455bf203ecc4cfc — Environment-variable access.

repo/scripts/cdnWorkflow/uploader.ts:50

    secretAccessKey: process.env.DOC_S3_SECRET_ACCESS_KEY || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d964dcc63225e02a — Filesystem access.

repo/scripts/changelogWorkflow/buildStaticChangelog.ts:119

      const data = readFileSync(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5159eb9885158092 — Filesystem access.

repo/scripts/changelogWorkflow/generateChangelog.ts:160

  const version = JSON.parse(readFileSync(pkgPath, 'utf8')).version;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4bfb2b1f3fcd8384 — Filesystem access.

repo/scripts/changelogWorkflow/generateChangelog.ts:199

  const currentFile = readFileSync(changelogPath, 'utf8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4e167906e56a0a93 — Filesystem access.

repo/scripts/changelogWorkflow/generateChangelog.ts:205

  writeFileSync(changelogPath, newContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a9c9b399c672153a — Environment-variable access.

repo/scripts/clerk-to-betterauth/_internal/config.ts:9

  const mode = process.env.CLERK_TO_BETTERAUTH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7a1b545c1650035f — Environment-variable access.

repo/scripts/clerk-to-betterauth/_internal/config.ts:29

  const value = process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a5d8c91133acab64 — Environment-variable access.

repo/scripts/clerk-to-betterauth/_internal/config.ts:43

  const value = process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1fa5cc729081ea95 — Environment-variable access.

repo/scripts/clerk-to-betterauth/_internal/config.ts:53

  const driver = process.env.CLERK_TO_BETTERAUTH_DATABASE_DRIVER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3897286cf2cc238e — Filesystem access.

repo/scripts/clerk-to-betterauth/_internal/load-data-from-files.ts:50

  const csv = await readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5fba3d9673c4ad82 — Filesystem access.

repo/scripts/clerk-to-betterauth/_internal/load-data-from-files.ts:59

    const file = await readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #df48d28c8471e043 — Environment-variable access.

repo/scripts/clerk-to-betterauth/export-clerk-users-with-api.ts:19

const CONCURRENCY = Number(process.env.CLERK_EXPORT_CONCURRENCY ?? 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c892c996f7237c5f — Environment-variable access.

repo/scripts/clerk-to-betterauth/export-clerk-users-with-api.ts:20

const MAX_RETRIES = Number(process.env.CLERK_EXPORT_RETRIES ?? 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ae0c1fa6c3204410 — Filesystem access.

repo/scripts/clerk-to-betterauth/export-clerk-users-with-api.ts:203

  await writeFile(outputPath, JSON.stringify(clerkUsers, null, 2), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c5f76300ed0ebea0 — Environment-variable access.

repo/scripts/clerk-to-betterauth/index.ts:9

const BATCH_SIZE = Number(process.env.CLERK_TO_BETTERAUTH_BATCH_SIZE) || 300;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9dc612223d1c71dc — Environment-variable access.

repo/scripts/clerk-to-betterauth/index.ts:12

  process.argv.includes('--dry-run') || process.env.CLERK_TO_BETTERAUTH_DRY_RUN === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0748074245cf1704 — Filesystem access.

repo/scripts/countEnWord.ts:48

    const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e7bdb71c96d963bc — Filesystem access.

repo/scripts/docsWorkflow/autoCDN.ts:44

      this.cache = JSON.parse(readFileSync(CACHE_FILE, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #62cdcf9e68a41b97 — Filesystem access.

repo/scripts/docsWorkflow/autoCDN.ts:53

      writeFileSync(CACHE_FILE, JSON.stringify(this.cache, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #11cabb9dddf59672 — Filesystem access.

repo/scripts/docsWorkflow/autoCDN.ts:62

      const mdx = readFileSync(post, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b1f7536bc007fcbc — Environment-variable access.

repo/scripts/docsWorkflow/autoCDN.ts:98

        cdnLinks[link] = cdnUrl.replaceAll(process.env.DOC_S3_PUBLIC_DOMAIN || '', '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #637fe3b8a906519b — Filesystem access.

repo/scripts/docsWorkflow/autoCDN.ts:126

      const mdx = readFileSync(post, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8e7186dc6d19f618 — Filesystem access.

repo/scripts/docsWorkflow/autoCDN.ts:149

      writeFileSync(post, matter.stringify(content, data));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4992df28b0151430 — Filesystem access.

repo/scripts/docsWorkflow/utils.ts:14

  const md = readFileSync(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d210c1c3f7b1f569 — Filesystem access.

repo/scripts/docsWorkflow/utils.ts:18

  writeFileSync(path, result, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0b24b8e77cf0d481 — Filesystem access.

repo/scripts/docsWorkflow/utils.ts:27

  const md = readFileSync(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #63680e8c438e85b2 — Environment-variable access.

repo/scripts/docsWorkflow/utils.ts:87

    const githubToken = process.env.GITHUB_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f21d054124992408 — Filesystem access.

repo/scripts/electronWorkflow/buildDesktopChannel.ts:65

    return await fs.readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2ae8f336a986e261 — Filesystem access.

repo/scripts/electronWorkflow/buildDesktopChannel.ts:73

  await fs.writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c5d8b514ce5590e3 — Filesystem access.

repo/scripts/electronWorkflow/mergeMacReleaseFiles.js:44

      const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e27694a042c3ad63 — Filesystem access.

repo/scripts/electronWorkflow/mergeMacReleaseFiles.js:58

    fs.writeFileSync(filePath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5f21655e4753beb9 — Filesystem access.

repo/scripts/hotfixWorkflow/index.ts:32

    const pkg = JSON.parse(fs.readFileSync(PACKAGE_JSON_PATH, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #59d19bae02a039e6 — Filesystem access.

repo/scripts/i18nWorkflow/analyzeUnusedKeys.ts:175

    const content = fs.readFileSync(file, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6a94d4434506b7af — Filesystem access.

repo/scripts/i18nWorkflow/analyzeUnusedKeys.ts:448

  fs.writeFileSync(
    reportPath,
    JSON.stringify(
      {
        generatedAt: new Date().toISOString(),
        statistics: {
          totalKeys: allKeysCount,
          unusedKeys: unusedKeys.length,
          usageRate: ((usedKeysCount / allKeysCount) * 100).toFixed(2) + '%',
          usedKeys: usedKeysCount,
        },
        unusedKeys: unusedKeys.map((k) => ({
          filePath: k.filePath,
          fullKey: k.fullKey,
          key: k.key,
          namespace: k.namespace,
        })),
        unusedKeysByNamespace: Array.from(byNamespace.entries()).map(([ns, keys]) => ({
          count: keys.length,
          keys: keys.map((k) => k.key),
          namespace: ns,
        })),
      },
      null,
      2,
    ),
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5e4019fbfff3421f — Filesystem access.

repo/scripts/i18nWorkflow/cleanUnusedKeys.ts:137

          fs.writeFileSync(filePath, newContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e31533e3b02be258 — Filesystem access.

repo/scripts/i18nWorkflow/cleanUnusedKeys.ts:193

        const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #64ea08ba2e9ee99a — Filesystem access.

repo/scripts/i18nWorkflow/cleanUnusedKeys.ts:213

            fs.writeFileSync(filePath, JSON.stringify(translations, null, 2) + '\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a9406df2c6fac99e — Filesystem access.

repo/scripts/i18nWorkflow/cleanUnusedKeys.ts:277

  const reportContent = fs.readFileSync(reportPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #34cd62bf873ba89f — Filesystem access.

repo/scripts/i18nWorkflow/flattenLocaleKeys.ts:78

  writeFileSync(filePath, formatted, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #10d2e2da909fe499 — Filesystem access.

repo/scripts/i18nWorkflow/flattenLocaleKeys.ts:87

  writeFileSync(filePath, formatted, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #753e3a51f866c26b — Filesystem access.

repo/scripts/i18nWorkflow/flattenLocaleKeys.ts:116

      const raw = readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #06309c0a3255c2bf — Filesystem access.

repo/scripts/i18nWorkflow/utils.ts:13

  const data = readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #26a8f76e1f666e34 — Filesystem access.

repo/scripts/i18nWorkflow/utils.ts:19

  writeFileSync(filePath, jsonStr, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #488e89973e5251dd — Filesystem access.

repo/scripts/i18nWorkflow/utils.ts:28

  writeFileSync(filePath, formatted, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eb5fe3b0718cfd1f — Filesystem access.

repo/scripts/mdxWorkflow/index.ts:17

      const mdx = readFileSync(post, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #660695d9ca013a64 — Filesystem access.

repo/scripts/mdxWorkflow/index.ts:48

      writeFileSync(post, matter.stringify(formatedContent, data));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #375ec44706afc6bd — Filesystem access.

repo/scripts/migrate-spa-navigation.ts:39

  const content = await readFile(fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4264464165bef825 — Filesystem access.

repo/scripts/migrate-spa-navigation.ts:105

    await writeFile(fullPath, newContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #602f7395d91ac47e — Environment-variable access.

repo/scripts/migrateServerDB/docker.cjs:7

if (!process.env.DATABASE_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7666130d4d6b089a — Environment-variable access.

repo/scripts/migrateServerDB/docker.cjs:11

const client = new Pool({ connectionString: process.env.DATABASE_URL });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #982c3f316b97caf9 — Environment-variable access.

repo/scripts/migrateServerDB/index.ts:16

const env = process.env.NODE_ENV || 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #877dcc618050a3c4 — Environment-variable access.

repo/scripts/migrateServerDB/index.ts:27

  if (process.env.DATABASE_DRIVER === 'node') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #46a31b84fb1c189c — Environment-variable access.

repo/scripts/migrateServerDB/index.ts:38

const connectionString = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #de4872e2e61f7198 — Environment-variable access.

repo/scripts/mobileSpaWorkflow/index.ts:17

  const value = process.env[name];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e6ae99f666e1f892 — Environment-variable access.

repo/scripts/mobileSpaWorkflow/index.ts:27

  const keyPrefix = (process.env.MOBILE_S3_KEY_PREFIX || `mobile/${timestamp}`).replaceAll(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b3b169f3a02f154f — Environment-variable access.

repo/scripts/mobileSpaWorkflow/index.ts:60

    region: process.env.MOBILE_S3_REGION || 'auto',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #78f6c233f072ba96 — Filesystem access.

repo/scripts/mobileSpaWorkflow/template.ts:11

  const html = readFileSync(sourcePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6151650aa77b9a18 — Filesystem access.

repo/scripts/mobileSpaWorkflow/template.ts:24

  writeFileSync(outputPath, output, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e1b4a52df8400245 — Filesystem access.

repo/scripts/mobileSpaWorkflow/upload.ts:49

      const buffer = readFileSync(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #33351ec74adab608 — Environment-variable access.

repo/scripts/nextauth-to-betterauth/_internal/config.ts:10

  const mode = process.env.NEXTAUTH_TO_BETTERAUTH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bc311bf456ab7bc0 — Environment-variable access.

repo/scripts/nextauth-to-betterauth/_internal/config.ts:20

  const value = process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #669449c56c6b3549 — Environment-variable access.

repo/scripts/nextauth-to-betterauth/_internal/config.ts:30

  const driver = process.env.NEXTAUTH_TO_BETTERAUTH_DATABASE_DRIVER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #49fe45d6aaaf658f — Environment-variable access.

repo/scripts/nextauth-to-betterauth/_internal/config.ts:36

  return Number(process.env.NEXTAUTH_TO_BETTERAUTH_BATCH_SIZE) || 300;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ca0a74ba540a2ce7 — Environment-variable access.

repo/scripts/nextauth-to-betterauth/_internal/config.ts:40

  return process.argv.includes('--dry-run') || process.env.NEXTAUTH_TO_BETTERAUTH_DRY_RUN === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4841818ca1173b55 — Filesystem access.

repo/scripts/readmeWorkflow/utlis.ts:38

  return readFileSync(getReadmePath(lang), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e52522f32c3bd6ed — Filesystem access.

repo/scripts/readmeWorkflow/utlis.ts:42

  writeFileSync(getReadmePath(lang), content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fbc5867aaaa57f26 — Environment-variable access.

repo/scripts/registerDesktopEnv.cjs:18

const isDesktop = process.env.DESKTOP_BUILD === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9dddf8549efcaff5 — Filesystem access.

repo/scripts/releaseWorkflow/index.ts:28

    const pkg = JSON.parse(fs.readFileSync(PACKAGE_JSON_PATH, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6a30cf407710aa6f — Filesystem access.

repo/scripts/replaceComponentImports.ts:90

  const content = readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #325cc3ff0845ba00 — Filesystem access.

repo/scripts/replaceComponentImports.ts:132

      writeFileSync(filePath, newContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #99fd22b0ce739b53 — Environment-variable access.

repo/scripts/resetOnboarding/index.ts:19

const env = process.env.NODE_ENV || 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bc0e0240fb95f9c9 — Environment-variable access.

repo/scripts/resetOnboarding/index.ts:33

  if (!process.env.DATABASE_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4b631759173ac5ca — Environment-variable access.

repo/scripts/seedUserInfo/index.ts:17

const env = process.env.NODE_ENV || 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5cacfcae97f49b24 — Environment-variable access.

repo/scripts/seedUserInfo/index.ts:39

  if (!process.env.DATABASE_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #41b55857c2b2359b — Environment-variable access.

repo/scripts/serverLauncher/startServer.js:88

    process.env.ENABLE_PROXY_DNS === '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b18f124a51617f43 — Filesystem access.

repo/scripts/serverLauncher/startServer.js:111

  await fs.writeFile(PROXYCHAINS_CONF_PATH, configContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f0e545f24ee44093 — Environment-variable access.

repo/scripts/serverLauncher/startServer.js:131

  const KEY_VAULTS_SECRET = process.env.KEY_VAULTS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1f80b7649bb2562f — Environment-variable access.

repo/scripts/serverLauncher/startServer.js:134

  const port = process.env.PORT || 3210;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #877edb510ee389ec — Environment-variable access.

repo/scripts/serverLauncher/startServer.js:168

  const QSTASH_URL = process.env.QSTASH_URL || 'https://qstash-eu-central-1.upstash.io';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7852afa564d752f5 — Environment-variable access.

repo/scripts/serverLauncher/startServer.js:170

  const QSTASH_TOKEN = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #94f87c3c7efa3b28 — Environment-variable access.

repo/scripts/serverLauncher/startServer.js:176

  const APP_URL = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #727cd0f58896e4e2 — Environment-variable access.

repo/scripts/serverLauncher/startServer.js:209

  const PROXY_URL = process.env.PROXY_URL || ''; // Default empty string to avoid undefined errors

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4b1618ee9edac2f7 — Environment-variable access.

repo/scripts/serverLauncher/startServer.js:226

  if (process.env.DATABASE_DRIVER) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #67e0c2cc7f1244ed — Environment-variable access.

repo/scripts/vercelIgnoredBuildStep.js:4

const branchName = process.env.VERCEL_GIT_COMMIT_REF || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7061e2bd9f8070bc — Environment-variable access.

repo/src/app/(backend)/_deprecated/createBizOpenAI/createAzureOpenai.ts:16

  const OPENAI_PROXY_URL = process.env.OPENAI_PROXY_URL || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1c0f7fc07ff2b1cf — Environment-variable access.

repo/src/app/(backend)/_deprecated/createBizOpenAI/createOpenai.ts:9

  const OPENAI_PROXY_URL = process.env.OPENAI_PROXY_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cc59182ae8971cf4 — Environment-variable access.

repo/src/app/(backend)/api/dev/agent-tracing/route.ts:9

  if (process.env.NODE_ENV !== 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #976887eda1e5694e — Filesystem access.

repo/src/app/(backend)/api/dev/agent-tracing/route.ts:21

      const content = await fs.readFile(fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5965b7b5b38043a2 — Environment-variable access.

repo/src/app/(backend)/api/dev/test-push/route.ts:19

  if (process.env.NODE_ENV !== 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #52d4eacf61f5f0cc — Environment-variable access.

repo/src/app/(backend)/api/webhooks/memory-user-memory/pipelines/extract/chat-topic/cancel/route.ts:37

  const token = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c29a6b553adb1e11 — Environment-variable access.

repo/src/app/(backend)/api/webhooks/memory-user-memory/pipelines/extract/chat-topic/cancel/route.ts:41

  if (process.env.QSTASH_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f332c60503314916 — Environment-variable access.

repo/src/app/(backend)/api/webhooks/memory-user-memory/pipelines/extract/chat-topic/cancel/route.ts:42

    (config as Record<string, unknown>).url = process.env.QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6cbd9505eb00015f — Environment-variable access.

repo/src/app/(backend)/market/oidc/[[...segments]]/route.ts:7

const MARKET_BASE_URL = process.env.MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ab6bc1e5a68e3853 — Environment-variable access.

repo/src/app/(backend)/middleware/auth/index.test.ts:234

      delete process.env.MOCK_DEV_USER_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fa08972738658e54 — Environment-variable access.

repo/src/app/(backend)/middleware/auth/index.ts:73

    const isMockUser = process.env.ENABLE_MOCK_DEV_USER === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0328ab420b7e0163 — Environment-variable access.

repo/src/app/(backend)/middleware/auth/index.ts:74

    if (process.env.NODE_ENV === 'development' && (isDebugApi || isMockUser)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #192879b337af81ea — Environment-variable access.

repo/src/app/(backend)/middleware/auth/index.ts:75

      const mockUserId = process.env.MOCK_DEV_USER_ID || 'DEV_USER';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #8515228f83c92391 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/app/(backend)/webapi/chat/[provider]/route.test.ts:32

  request = new Request(new URL('https://test.com'), {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #276ac240aa1c3e0f — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/app/(backend)/webapi/chat/[provider]/route.test.ts:88

      request = new Request(new URL('https://test.com'), {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #5a99cf2b01b8baa7 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/app/(backend)/webapi/chat/[provider]/route.test.ts:113

      request = new Request(new URL('https://test.com'), {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #22e1775a1d46ec4c — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/app/(backend)/webapi/models/[provider]/pricing/route.test.ts:45

  request = new Request(new URL('https://test.com'), {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #808441ca03fc9ada — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/app/(backend)/webapi/models/[provider]/route.test.ts:33

  request = new Request(new URL('https://test.com'), {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #51b35838fa4de6ad — Environment-variable access.

repo/src/app/(backend)/webapi/revalidate/route.ts:6

  if (!process.env.REVALIDATE_SECRET) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4290f4ea316ec885 — Environment-variable access.

repo/src/app/(backend)/webapi/revalidate/route.ts:12

  if (!authToken || authToken !== process.env.REVALIDATE_SECRET) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bac2e1af6086f913 — Environment-variable access.

repo/src/app/[variants]/metadata.ts:11

const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e16b13757b36091b — Environment-variable access.

repo/src/app/layout.tsx:6

const inVercel = process.env.VERCEL === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3a835375739c1a28 — Environment-variable access.

repo/src/app/manifest.ts:5

  if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1c28ed28f1560dcf — Environment-variable access.

repo/src/app/spa-auth/[locale]/[[...path]]/route.ts:17

const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #92c669ae3a8bcbca — Environment-variable access.

repo/src/app/spa/[variants]/[[...path]]/route.ts:34

const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #62266ab1aaf00b62 — Environment-variable access.

repo/src/components/Analytics/Desktop.tsx:7

  const projectId = process.env.NEXT_PUBLIC_DESKTOP_PROJECT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #539b8753ac9fe17b — Environment-variable access.

repo/src/components/Analytics/Desktop.tsx:8

  const baseUrl = process.env.NEXT_PUBLIC_DESKTOP_UMAMI_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dc2262d7d2cb5538 — Environment-variable access.

repo/src/components/Loading/BrandTextLoading/index.tsx:20

  const showDebug = process.env.NODE_ENV === 'development' && debugId;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low pii_flow production #ccd523c2cc1abdc3 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Same-origin destination — not external exfiltration.

repo/src/features/Auth/SignIn/useSignIn.ts:158 · flow /tmp/closeopen-c0i_3jq8/repo/src/features/Auth/SignIn/useSignIn.ts:154 → /tmp/closeopen-c0i_3jq8/repo/src/features/Auth/SignIn/useSignIn.ts:158

      const response = await fetch('/api/auth/check-user', {
        body: JSON.stringify({ email: targetEmail }),
        headers: { 'Content-Type': 'application/json' },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs production #d8b96d55b25f62ef — Environment-variable access.

repo/src/features/DevFeatureFlagPanel/Hydrator.tsx:7

const isDevEnv = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b9d599666bb2de16 — Environment-variable access.

repo/src/features/DevFeatureFlagPanel/index.tsx:12

const isDevEnv = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d195693e81625a0e — Environment-variable access.

repo/src/instrumentation.ts:3

  if (process.env.NODE_ENV !== 'production' && process.env.NEXT_RUNTIME === 'nodejs') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7415061f100d4fc9 — Environment-variable access.

repo/src/instrumentation.ts:11

  const isDev = process.env.NODE_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f3a6ea0347b949d3 — Environment-variable access.

repo/src/instrumentation.ts:13

    process.env.NEXT_RUNTIME === 'nodejs' &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a499a9cac94c3ddf — Environment-variable access.

repo/src/instrumentation.ts:14

    process.env.DATABASE_URL &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6f748a2a5bb12f37 — Environment-variable access.

repo/src/instrumentation.ts:15

    !process.env.VERCEL_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4096e41010b6a261 — Environment-variable access.

repo/src/instrumentation.ts:16

    (!isDev || process.env.ENABLE_BOT_IN_DEV === '1')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f9b0fb469e5b05b0 — Environment-variable access.

repo/src/instrumentation.ts:31

  if (process.env.NODE_ENV !== 'production' && !process.env.ENABLE_TELEMETRY_IN_DEV) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #12ac4f034827501e — Environment-variable access.

repo/src/instrumentation.ts:35

  const shouldEnable = process.env.ENABLE_TELEMETRY && process.env.NEXT_RUNTIME === 'nodejs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #832f4f23d036a07c — Environment-variable access.

repo/src/layout/AuthProvider/MarketAuth/MarketAuthProvider.tsx:172

      const baseUrl = process.env.NEXT_PUBLIC_MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7865b009fb148cdf — Environment-variable access.

repo/src/libs/better-auth/define-config.test.ts:114

    delete process.env.HTTP_PROXY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #23a7d2e7f117df4f — Environment-variable access.

repo/src/libs/better-auth/define-config.test.ts:115

    delete process.env.http_proxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b38f93ddb3be5fb4 — Environment-variable access.

repo/src/libs/better-auth/define-config.test.ts:116

    delete process.env.HTTPS_PROXY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7a8217842985cd1e — Environment-variable access.

repo/src/libs/better-auth/define-config.test.ts:117

    delete process.env.https_proxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f7ba3c0b93333087 — Environment-variable access.

repo/src/libs/better-auth/define-config.test.ts:118

    delete process.env.NO_PROXY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #81693e7c165d04f3 — Environment-variable access.

repo/src/libs/better-auth/define-config.test.ts:119

    delete process.env.no_proxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e8b78b318c081f1c — Environment-variable access.

repo/src/libs/better-auth/define-config.ts:53

if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #23891d7521adf98d — Environment-variable access.

repo/src/libs/better-auth/define-config.ts:54

  const httpProxy = process.env.HTTP_PROXY || process.env.http_proxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #160b2ef11f380725 — Environment-variable access.

repo/src/libs/better-auth/define-config.ts:55

  const httpsProxy = process.env.HTTPS_PROXY || process.env.https_proxy || httpProxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bf6a58675480bff3 — Environment-variable access.

repo/src/libs/better-auth/define-config.ts:61

      noProxy: mergeLocalNoProxy(process.env.NO_PROXY || process.env.no_proxy),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #2bbda7e6e7d4cc5f — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/libs/better-auth/sso/providers/feishu.ts:80

        const tokenResponse = await fetch(FEISHU_TOKEN_URL, {
          body: JSON.stringify({
            client_id: clientId,
            client_secret: clientSecret,
            code,
            grant_type: 'authorization_code',
            redirect_uri: redirectURI,
          }),
          cache: 'no-store',
          headers: {
            'content-type': 'application/json; charset=utf-8',
          },
          method: 'POST',
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #0b5c68449f40440a — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/libs/better-auth/sso/providers/feishu.ts:120

        const response = await fetch(FEISHU_USERINFO_URL, {
          cache: 'no-store',
          headers: {
            Authorization: `Bearer ${tokens.accessToken}`,
          },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #88794aaa917171a7 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/libs/better-auth/sso/providers/wechat.ts:47

        const tokenUrl = new URL(WECHAT_TOKEN_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #20fbc3f041d1c882 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/libs/better-auth/sso/providers/wechat.ts:90

        const url = new URL(WECHAT_USERINFO_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #1d82d95c29a72d96 — Environment-variable access.

repo/src/libs/better-auth/utils/config.ts:53

    normalizeOrigin(process.env.VERCEL_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #904d30e953636144 — Environment-variable access.

repo/src/libs/better-auth/utils/config.ts:54

    normalizeOrigin(process.env.VERCEL_BRANCH_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7f60a5f3c2cf0adc — Environment-variable access.

repo/src/libs/bootMetrics/finalize.test.ts:104

    process.env.NEXT_PUBLIC_BOOTSTRAP_METRICS_INGEST_URL = INGEST_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #91a9f5324c92b6ef — Environment-variable access.

repo/src/libs/bootMetrics/finalize.test.ts:109

    delete process.env.NEXT_PUBLIC_BOOTSTRAP_METRICS_INGEST_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8ebb46fe1f107177 — Environment-variable access.

repo/src/libs/bootMetrics/finalize.test.ts:113

    delete process.env.NEXT_PUBLIC_BOOTSTRAP_METRICS_INGEST_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e006399374b3410c — Environment-variable access.

repo/src/libs/bootMetrics/finalize.ts:124

    const ingestUrl = process.env.NEXT_PUBLIC_BOOTSTRAP_METRICS_INGEST_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6266c4e1dcfce0c2 — Environment-variable access.

repo/src/libs/debug-file-logger.ts:20

const shouldEnable = process.env.DEBUG_LOG_FILE === '1' && process.env.NODE_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b4a101f5fe98e68d — Filesystem access.

repo/src/libs/document-loaders/loaders/code/__tests__/index.test.ts:26

    const code = fs.readFileSync(join(__dirname, `./long.txt`), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a56d3985cf0bd847 — Filesystem access.

repo/src/libs/document-loaders/loaders/csv/__tests__/index.test.ts:11

    const content = fs.readFileSync(join(__dirname, `./demo.csv`), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #39db0f67deca8b00 — Filesystem access.

repo/src/libs/document-loaders/loaders/epub/__tests__/index.test.ts:11

    const content = fs.readFileSync(join(__dirname, `./demo.epub`));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2ebaae9e9433313e — Filesystem access.

repo/src/libs/document-loaders/loaders/latex/__tests__/index.test.ts:11

    const content = fs.readFileSync(join(__dirname, `./demo.tex`), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #5ad34b80527266bb — Filesystem access.

repo/src/libs/document-loaders/loaders/markdown/__tests__/index.test.ts:9

    const content = fs.readFileSync(join(__dirname, `./demo.mdx`), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d8ab3c7816169f24 — Filesystem access.

repo/src/libs/document-loaders/loaders/txt/__tests__/index.test.ts:45

    const content = fs.readFileSync(join(__dirname, `./pg24022.txt`), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #30901c986ff52bc3 — Environment-variable access.

repo/src/libs/mcp/client.ts:27

  const val = Number(process.env.MCP_TOOL_TIMEOUT);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8d6a02bad0c2606e — Environment-variable access.

repo/src/libs/next/config/define-config.ts:20

  const isProd = process.env.NODE_ENV === 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #699ca9afab2f5638 — Environment-variable access.

repo/src/libs/next/config/define-config.ts:21

  const buildWithDocker = process.env.DOCKER === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c86233a0b3af1bd1 — Environment-variable access.

repo/src/libs/next/config/define-config.ts:23

  const shouldUseCSP = process.env.ENABLED_CSP === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6d4dba25f0a7e3c5 — Environment-variable access.

repo/src/libs/next/config/define-config.ts:26

    process.env.NODE_ENV === 'test' || process.env.TEST === '1' || process.env.E2E === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #464378e40c5844be — Environment-variable access.

repo/src/libs/next/config/define-config.ts:28

  const isStandaloneMode = buildWithDocker || process.env.NEXT_BUILD_STANDALONE === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fa91c83dd205dfec — Environment-variable access.

repo/src/libs/next/config/define-config.ts:59

  const assetPrefix = process.env.NEXT_PUBLIC_ASSET_PREFIX;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #18971b9ab058c971 — Environment-variable access.

repo/src/libs/next/proxy/define-config.ts:44

    secure: process.env.NODE_ENV === 'production',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1c70e54fcf0a7e21 — Environment-variable access.

repo/src/libs/next/proxy/define-config.ts:115

        port: process.env.PORT || '3210',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b1ea08df39c2ce15 — Environment-variable access.

repo/src/libs/next/proxy/define-config.ts:121

      url.port = process.env.PORT || '3210';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #84aec7382aa541a8 — Environment-variable access.

repo/src/libs/qstash/index.ts:10

  ...(process.env.VERCEL_AUTOMATION_BYPASS_SECRET && {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #41ce69818b792166 — Environment-variable access.

repo/src/libs/qstash/index.ts:11

    'x-vercel-protection-bypass': process.env.VERCEL_AUTOMATION_BYPASS_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8f9f0889da53677d — Environment-variable access.

repo/src/libs/qstash/index.ts:141

  token: process.env.QSTASH_TOKEN!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0170d3d2132a1a74 — Environment-variable access.

repo/src/libs/qstash/index.ts:150

  token: process.env.QSTASH_TOKEN!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1861bf4b460eca84 — Environment-variable access.

repo/src/libs/qstash/index.ts:158

  const currentSigningKey = process.env.QSTASH_CURRENT_SIGNING_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2d126b0fe97cce59 — Environment-variable access.

repo/src/libs/qstash/index.ts:159

  const nextSigningKey = process.env.QSTASH_NEXT_SIGNING_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6efad0365d1c2dfa — Environment-variable access.

repo/src/libs/redis/manager.ts:4

export const isRedisDisabledByEnv = () => !!process.env.DISABLE_REDIS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f639effa5bf0272b — Environment-variable access.

repo/src/libs/redis/redis.test.ts:6

  const url = process.env.REDIS_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7497db5c41921691 — Environment-variable access.

repo/src/libs/redis/redis.test.ts:10

  const database = Number.parseInt(process.env.REDIS_DATABASE ?? '', 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c81295e308299e94 — Environment-variable access.

repo/src/libs/redis/redis.test.ts:15

    password: process.env.REDIS_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3f88f54e0b1985b6 — Environment-variable access.

repo/src/libs/redis/redis.test.ts:16

    prefix: process.env.REDIS_PREFIX ?? 'lobe-chat-test',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #98ace7414c5fb541 — Environment-variable access.

repo/src/libs/redis/redis.test.ts:17

    tls: process.env.REDIS_TLS === 'true',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #61595f68c14dad53 — Environment-variable access.

repo/src/libs/redis/redis.test.ts:19

    username: process.env.REDIS_USERNAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d934b2cbb85e3528 — Environment-variable access.

repo/src/libs/spaHtml/index.test.ts:42

    delete process.env.NEXT_PUBLIC_DESKTOP_PROJECT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #efa94dd68cb1bec7 — Environment-variable access.

repo/src/libs/spaHtml/index.test.ts:43

    delete process.env.NEXT_PUBLIC_DESKTOP_UMAMI_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c6e055e13be6a520 — Environment-variable access.

repo/src/libs/spaHtml/index.test.ts:47

    process.env.NEXT_PUBLIC_DESKTOP_PROJECT_ID = 'pid';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #de8ebd0d2a974edb — Environment-variable access.

repo/src/libs/spaHtml/index.test.ts:48

    process.env.NEXT_PUBLIC_DESKTOP_UMAMI_BASE_URL = 'https://umami.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a99a4332fe6b1429 — Environment-variable access.

repo/src/libs/spaHtml/index.ts:8

  `http://localhost:${Number(process.env.VITE_DEV_PORT) || 9876}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4288c2be10595ea8 — Environment-variable access.

repo/src/libs/spaHtml/index.ts:130

    process.env.NEXT_PUBLIC_DESKTOP_PROJECT_ID &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f3955316e09dff3f — Environment-variable access.

repo/src/libs/spaHtml/index.ts:131

    process.env.NEXT_PUBLIC_DESKTOP_UMAMI_BASE_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a7cf098faed666b9 — Environment-variable access.

repo/src/libs/spaHtml/index.ts:134

      baseUrl: process.env.NEXT_PUBLIC_DESKTOP_UMAMI_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #01434143b5bd08e5 — Environment-variable access.

repo/src/libs/spaHtml/index.ts:135

      projectId: process.env.NEXT_PUBLIC_DESKTOP_PROJECT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #277c5c906119b35e — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/routes/(main)/agent/features/Conversation/WorkingSidebar/Browser/utils.ts:19

    const searchUrl = new URL('https://www.bing.com/search');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #4429a128b3c951ad — Filesystem access.

repo/src/services/electron/desktopExportService.tsx:32

    await localFileService.writeFile({
      content,
      path: result.filePath,
    });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8cf4d4709312022e — Filesystem access.

repo/src/services/electron/localFileService.ts:128

    return ensureElectronIpc().localSystem.readFile(params);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #40f4034e29a6e548 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/services/global.ts:20

    const res = await fetch(VERSION_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #7b49624b978199e3 — Environment-variable access.

repo/src/services/marketApi.ts:202

    const marketBaseUrl = process.env.NEXT_PUBLIC_MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #743b281472000986 — Filesystem access.

repo/src/services/projectFile.ts:164

      : localFileService.writeFile({ content, path });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0076b374d7c5c140 — Filesystem access.

repo/src/spa/router/desktopRouter.sync.test.tsx:84

    readFile(path.join(process.cwd(), 'src/spa/router/desktopRouter.config.tsx'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1e262c71e61839a8 — Filesystem access.

repo/src/spa/router/desktopRouter.sync.test.tsx:85

    readFile(path.join(process.cwd(), 'src/spa/router/desktopRouter.config.desktop.tsx'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #787ba87d809366e6 — Filesystem access.

repo/src/spa/router/mobileRouter.test.tsx:8

    const source = await readFile(
      path.join(process.cwd(), 'src/spa/router/mobileRouter.config.tsx'),
      'utf8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4c8d386180a7d95e — Filesystem access.

repo/src/store/chat/slices/agentRun/actions/__tests__/heterogeneousAgentExecutor.test.ts:2372

      const raw = fs.readFileSync(tracePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #97d27504419698bb — Filesystem access.

repo/src/store/chat/slices/agentRun/actions/__tests__/heterogeneousAgentExecutor.test.ts:3114

        traceData = JSON.parse(fs.readFileSync(tracePath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #65bddb9d7718dbef — Environment-variable access.

repo/src/store/chat/slices/agentRun/actions/lifecycle/buildRunLifecycle.test.ts:304

    const previous = process.env.NEXT_PUBLIC_DEV_DISABLE_AUTO_TOPIC;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b4c442427e03498e — Environment-variable access.

repo/src/store/chat/slices/agentRun/actions/lifecycle/buildRunLifecycle.test.ts:305

    process.env.NEXT_PUBLIC_DEV_DISABLE_AUTO_TOPIC = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #165be93d2d7f2469 — Environment-variable access.

repo/src/store/chat/slices/agentRun/actions/lifecycle/buildRunLifecycle.test.ts:328

        delete process.env.NEXT_PUBLIC_DEV_DISABLE_AUTO_TOPIC;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2c0337d3490a705e — Environment-variable access.

repo/src/store/chat/slices/agentRun/actions/lifecycle/buildRunLifecycle.test.ts:330

        process.env.NEXT_PUBLIC_DEV_DISABLE_AUTO_TOPIC = previous;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #67da4b8d20d6837d — Environment-variable access.

repo/src/store/chat/slices/agentRun/actions/lifecycle/buildRunLifecycle.ts:196

        __DEV__ && process.env.NEXT_PUBLIC_DEV_DISABLE_AUTO_TOPIC === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #559371c6c02a375f — Environment-variable access.

repo/src/store/chat/slices/message/action.test.ts:80

  process.env.NEXT_PUBLIC_BASE_PATH = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c8af55b3a6839f12 — Environment-variable access.

repo/src/store/serverConfig/slices/featureFlagOverride/action.ts:11

const isDevEnv = () => process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6afbfac66b6521c6 — Environment-variable access.

repo/src/store/serverConfig/slices/featureFlagOverride/storage.ts:7

const isDevEnv = () => process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bd0f6713b3b42717 — Environment-variable access.

repo/vite.config.ts:20

const isMobile = process.env.MOBILE === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #160d49714059bbcc — Environment-variable access.

repo/vite.config.ts:21

const isAuth = process.env.AUTH === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #004f02f9a94b14ff — Environment-variable access.

repo/vite.config.ts:22

const mode = process.env.NODE_ENV === 'production' ? 'production' : 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a9627627739f8989 — Environment-variable access.

repo/vite.config.ts:26

const isDev = process.env.NODE_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4a9d9f95c5458c6e — Environment-variable access.

repo/vite.config.ts:28

const enableViteDevTools = process.env.LOBE_VITE_DEVTOOLS === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c4d01f8263b2f99c — Environment-variable access.

repo/vite.config.ts:31

  const pathValue = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #249b5484362a38fd — Environment-variable access.

repo/vite.config.ts:35

    const pathExt = (process.env.PATHEXT || '.COM;.EXE;.BAT;.CMD')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b027380a27779420 — Environment-variable access.

repo/vite.config.ts:105

  base: isDev ? '/' : process.env.VITE_CDN_BASE || (isAuth ? '/_spa-auth/' : '/_spa/'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5fa696bcf7492091 — Environment-variable access.

repo/vite.config.ts:304

      ? Number(process.env.MOBILE_SPA_PORT) || 3012

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #709ec9bdcf661317 — Environment-variable access.

repo/vite.config.ts:306

        ? Number(process.env.AUTH_SPA_PORT) || 3013

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #05a348655c01c165 — Environment-variable access.

repo/vite.config.ts:307

        : Number(process.env.SPA_PORT) || 9876,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6da6a0d48ecf7daf — Environment-variable access.

repo/vite.config.ts:313

      '/api': `http://localhost:${process.env.PORT || 3010}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cce418753eae6ae4 — Environment-variable access.

repo/vite.config.ts:314

      '/oidc': `http://localhost:${process.env.PORT || 3010}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #87048f142ef43098 — Environment-variable access.

repo/vite.config.ts:315

      '/trpc': `http://localhost:${process.env.PORT || 3010}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b097eaa9724c148e — Environment-variable access.

repo/vite.config.ts:316

      '/webapi': `http://localhost:${process.env.PORT || 3010}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/web-crawler

npm first-party

high pii_flow production #e2d7cb83c2dadc3b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/web-crawler/src/crawImpl/browserless.ts:42 · flow /tmp/closeopen-c0i_3jq8/repo/packages/web-crawler/src/crawImpl/browserless.ts:10 → /tmp/closeopen-c0i_3jq8/repo/packages/web-crawler/src/crawImpl/browserless.ts:42

        fetch(
          qs.stringifyUrl({
            query: {
              blockAds: BROWSERLESS_BLOCK_ADS,
              launch: JSON.stringify({ stealth: BROWSERLESS_STEALTH_MODE }),
              token: BROWSERLESS_TOKEN,
            },
            url: urlJoin(BASE_URL, '/content'),
          }),
          {
            body: JSON.stringify(input),
            headers: {
              'Content-Type': 'application/json',
            },
            method: 'POST',
            signal,
          },
        ),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #19c07cbb6ae6a096 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/web-crawler/src/crawImpl/exa.ts:32 · flow /tmp/closeopen-c0i_3jq8/repo/packages/web-crawler/src/crawImpl/exa.ts:25 → /tmp/closeopen-c0i_3jq8/repo/packages/web-crawler/src/crawImpl/exa.ts:32

        fetch('https://api.exa.ai/contents', {
          body: JSON.stringify({
            livecrawl: 'fallback', // always, fallback
            text: true,
            urls: [url],
          }),
          headers: {
            'Content-Type': 'application/json',
            'x-api-key': !apiKey ? '' : apiKey,
          },
          method: 'POST',
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #953586f867798f87 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/web-crawler/src/crawImpl/firecrawl.ts:62 · flow /tmp/closeopen-c0i_3jq8/repo/packages/web-crawler/src/crawImpl/firecrawl.ts:54 → /tmp/closeopen-c0i_3jq8/repo/packages/web-crawler/src/crawImpl/firecrawl.ts:62

        fetch(`${baseUrl}/scrape`, {
          body: JSON.stringify({
            formats: ['markdown'], // ["markdown", "html"]
            url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #ef2d7b343e9b4d5f — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/web-crawler/src/crawImpl/jina.ts:17 · flow /tmp/closeopen-c0i_3jq8/repo/packages/web-crawler/src/crawImpl/jina.ts:11 → /tmp/closeopen-c0i_3jq8/repo/packages/web-crawler/src/crawImpl/jina.ts:17

        fetch(`${getJinaReaderBaseUrl()}/${url}`, {
          headers: {
            'Accept': 'application/json',
            'Authorization': token ? `Bearer ${token}` : '',
            'x-send-from': 'LobeChat Community',
          },
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #6389b1be4ded9afc — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/web-crawler/src/crawImpl/search1api.ts:26 · flow /tmp/closeopen-c0i_3jq8/repo/packages/web-crawler/src/crawImpl/search1api.ts:19 → /tmp/closeopen-c0i_3jq8/repo/packages/web-crawler/src/crawImpl/search1api.ts:26

        fetch('https://api.search1api.com/crawl', {
          body: JSON.stringify({
            url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow production #83857c7b9f863667 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/packages/web-crawler/src/crawImpl/tavily.ts:33 · flow /tmp/closeopen-c0i_3jq8/repo/packages/web-crawler/src/crawImpl/tavily.ts:26 → /tmp/closeopen-c0i_3jq8/repo/packages/web-crawler/src/crawImpl/tavily.ts:33

        fetch('https://api.tavily.com/extract', {
          body: JSON.stringify({
            extract_depth: process.env.TAVILY_EXTRACT_DEPTH || 'basic', // basic or advanced
            include_images: false,
            urls: url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

expand_more 79 low-confidence finding(s)

low env_fs test-only #8724ec6aa1a58b2f — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:15

    delete process.env.BROWSERLESS_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3d5404d5cd85533a — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:16

    delete process.env.BROWSERLESS_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3119e90925dc974c — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:26

    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e145b1ee40a1ef8e — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:36

    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a917b7cef3b30202 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:49

    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #96a7b9f79a541310 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:62

    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #59684e7896dd6d41 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:96

    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #736818525aa13dab — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:137

    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #954a7b34767f93d1 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:16

    delete process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e1f01055958ac664 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:20

    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b71b1052244dd1e7 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:77

    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f1acb61e836222a7 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:101

    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3fa3497972580937 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:122

    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #21db6f073638c380 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:139

    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #67a5bb99eaf4a139 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:156

    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #97a365ba3ed31e6a — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:167

    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #cec5ff36bb103867 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:178

    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3eedb36fd441b907 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:191

    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #5cddacc7d0bcdde1 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:210

    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a8313d0ac2072310 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:231

    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #5000f84319596588 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:16

    delete process.env.FIRECRAWL_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ff8ea8894cc4735e — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:17

    delete process.env.FIRECRAWL_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #85bcecb87abbf600 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:21

    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #68116c2996a88bd6 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:86

    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #7e73dc81142d7aae — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:113

    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #012ef924817ca903 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:140

    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3be977ccfec4a02c — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:157

    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #75120cccdc077cdf — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:174

    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e06b857218ed8cbf — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:185

    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ac058d36b8bab4f8 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:198

    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9eb5721eb362f83d — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:211

    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4f49dd7b1bca588b — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:230

    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #457bbc6aa25ff07f — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:22

    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #6d7261ad834bc6cc — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:23

    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #88f16da66213958f — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:24

    delete process.env.JINA_USE_CN_DOMAINS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #fc231e2cf9a7cd29 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:28

    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e3ce21bb320f9285 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:29

    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c7223a8f42a9b5bf — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:30

    delete process.env.JINA_USE_CN_DOMAINS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ac96a74ae80ca489 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:80

    process.env.JINA_READER_API_KEY = 'env-reader-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #63461a072f0de459 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:105

    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d6e75b692a2bd6d2 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:109

    process.env.JINA_API_KEY = 'env-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f12c4729f4b38783 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:134

    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e455268e572364ae — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:163

    process.env.JINA_USE_CN_DOMAINS = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #5b7ee06e1c340823 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/search1api.test.ts:19

    process.env.SEARCH1API_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #bb66c5b128c0c7d1 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:16

    delete process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9388c7f5ad72a192 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:17

    delete process.env.TAVILY_EXTRACT_DEPTH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c7cd48377ec5d172 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:21

    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e69fd15f4e2acb32 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:55

    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e9f25536d79fab88 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:56

    process.env.TAVILY_EXTRACT_DEPTH = 'advanced';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #21d7fa43ec8dff83 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:98

    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8ed7b157e602d91d — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:123

    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #45f2556837a77eaf — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:145

    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f219cb0bf28c15a8 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:168

    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #1a9a0c04fc383374 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:185

    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ba28097783921f47 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:202

    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9d3122b6d207328b — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:213

    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #1d1aff02dbcdeab2 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:226

    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #49a0a6f3da23f44d — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:239

    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #bf720cbdf0242068 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:258

    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c9b568019656b1f5 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:280

    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #6de3520aca4a95d0 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:302

    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2697054b5dfb7351 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/browserless.ts:10

const BASE_URL = process.env.BROWSERLESS_URL ?? 'https://chrome.browserless.io';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eaef18a4ecc45f4d — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/browserless.ts:14

const BROWSERLESS_TOKEN = process.env.BROWSERLESS_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #003706f0bb29f729 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/browserless.ts:16

const BROWSERLESS_BLOCK_ADS = process.env.BROWSERLESS_BLOCK_ADS === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0fa01226ac673a15 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/browserless.ts:17

const BROWSERLESS_STEALTH_MODE = process.env.BROWSERLESS_STEALTH_MODE === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bf54a9c3ccaf5257 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/browserless.ts:27

  if (!process.env.BROWSERLESS_URL && !process.env.BROWSERLESS_TOKEN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7fe842c235c6851e — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/exa.ts:25

  const apiKey = process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #5889ecbe73ad6977 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/web-crawler/src/crawImpl/exa.ts:32

        fetch('https://api.exa.ai/contents', {
          body: JSON.stringify({
            livecrawl: 'fallback', // always, fallback
            text: true,
            urls: [url],
          }),
          headers: {
            'Content-Type': 'application/json',
            'x-api-key': !apiKey ? '' : apiKey,
          },
          method: 'POST',
          signal,
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #719d9c092253ded4 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/firecrawl.ts:54

  const apiKey = process.env.FIRECRAWL_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #77fe76cc79621775 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/firecrawl.ts:55

  const baseUrl = process.env.FIRECRAWL_URL || 'https://api.firecrawl.dev/v2';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7ebca4768272ef3d — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/jina.ts:11

  const token = params.apiKey ?? process.env.JINA_READER_API_KEY ?? process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5262db490c973eb7 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/search1api.ts:19

  const apiKey = process.env.SEARCH1API_CRAWL_API_KEY || process.env.SEARCH1API_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #2cbc90c072b31a40 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/web-crawler/src/crawImpl/search1api.ts:26

        fetch('https://api.search1api.com/crawl', {
          body: JSON.stringify({
            url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #0faef05094c756b1 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/tavily.ts:26

  const apiKey = process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #21d679623236a0af — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/web-crawler/src/crawImpl/tavily.ts:33

        fetch('https://api.tavily.com/extract', {
          body: JSON.stringify({
            extract_depth: process.env.TAVILY_EXTRACT_DEPTH || 'basic', // basic or advanced
            include_images: false,
            urls: url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #2f913af5f3fbf853 — Environment-variable access.

repo/packages/web-crawler/src/crawImpl/tavily.ts:35

            extract_depth: process.env.TAVILY_EXTRACT_DEPTH || 'basic', // basic or advanced

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #965c79aee6660fe5 — Filesystem access.

repo/packages/web-crawler/src/utils/htmlToMarkdown.test.ts:29

      const html = readFileSync(path.join(__dirname, `./html/${item.file}`), { encoding: 'utf8' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #df86163b6011d9c2 — Environment-variable access.

repo/packages/web-crawler/src/utils/withTimeout.ts:3

export const DEFAULT_TIMEOUT = process.env.CRAWLER_TIMEOUT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1abc0af635f998aa — Environment-variable access.

repo/packages/web-crawler/src/utils/withTimeout.ts:4

  ? Number(process.env.CRAWLER_TIMEOUT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/heterogeneous-agents

npm first-party

medium telemetry production #81de1a19a047267b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/packages/heterogeneous-agents/src/spawn/agentStreamPipeline.ts:137

      const payload = this.codexTracker ? await this.codexTracker.track(raw as any) : raw;

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #ce949a0c4002e878 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:28

    await tracker.track({
      item: {
        changes: [
          { kind: 'update', path: updatePath },
          { kind: 'add', path: addPath },
        ],
        id: 'item_1',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #7648160687f1bcb9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:43

    const enriched = await tracker.track({
      item: {
        changes: [
          { kind: 'update', path: updatePath },
          { kind: 'add', path: addPath },
        ],
        id: 'item_1',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #6be0073a8b8dd7e8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:88

    await tracker.track({
      item: {
        changes: [],
        id: 'item_missing_snapshot',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #e2fb38cfc1a08e82 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:99

    const enriched = await tracker.track({
      item: {
        changes: [{ kind: 'update', path: updatePath }],
        id: 'item_missing_snapshot',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #cf8efedd2b5e1f0d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:128

    await tracker.track({
      item: {
        changes: [{ kind: 'rename', path: afterPath }],
        id: 'item_rename',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #293a1d4ed5efc9e3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:139

    const enriched = await tracker.track({
      item: {
        changes: [{ kind: 'rename', path: afterPath }],
        id: 'item_rename',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #ef06f043915e017a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:168

    await tracker.track({
      item: {
        changes: [{ kind: 'update', path: relativePath }],
        id: 'item_relative',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #d64e2952eda63ce8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:179

    const enriched = await tracker.track({
      item: {
        changes: [{ kind: 'update', path: relativePath }],
        id: 'item_relative',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #8a1b58d72752325a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:209

    await tracker.track({
      item: {
        changes: [{ kind: 'add', path: addPath }],
        id: 'item_plus_prefix',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #45a0a9fe7cac9f91 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:220

    const enriched = await tracker.track({
      item: {
        changes: [{ kind: 'add', path: addPath }],
        id: 'item_plus_prefix',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 78 low-confidence finding(s)

low env_fs production #1a6fc024a5e8e50f — Filesystem access.

repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:8

  const raw = await readFile(new URL(`./__fixtures__/codex/${name}`, import.meta.url), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #18422a770ce50ff2 — Environment-variable access.

repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:181

    const previousTimezone = process.env.TZ;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #355f4b60e2dc54e2 — Environment-variable access.

repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:182

    process.env.TZ = 'Asia/Shanghai';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2051fc7b21db5167 — Environment-variable access.

repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:208

        delete process.env.TZ;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #037f9b5609aa8584 — Environment-variable access.

repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:210

        process.env.TZ = previousTimezone;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #73d4353e7141a9e2 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/claudeAgentSdkSession.ts:16

  const raw = process.env[name];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5cc210fd4ff8077d — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/cliSpawn.ts:187

    const source = await readFile(shimPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #453bb2a8ab497de2 — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:24

    await writeFile(updatePath, 'hello\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #58f75e827aa5f00f — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:40

    await writeFile(updatePath, 'hello\nappended line\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e2067d4ff6d19d88 — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:41

    await writeFile(addPath, 'line one\nline two\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a654cd9c08ff825d — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:84

    await writeFile(updatePath, 'line one\nline two\nline three\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9847cbe21392d420 — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:97

    await writeFile(updatePath, 'line one\nline two updated\nline three\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9816c814e2833a5f — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:124

    await writeFile(beforePath, 'content\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #17ba7e5c11a5e480 — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:164

    await writeFile(absolutePath, 'before\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ec13ced88295a75a — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:177

    await writeFile(absolutePath, 'before\nafter\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7f5a3ecf4a456a6a — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:218

    await writeFile(addPath, '++leading content\n+++header lookalike\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #86426cd5c55bb83c — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.ts:64

      content: await readFile(filePath, 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b6935e5ac69b84bb — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:38

    await writeFile(
      path.join(codexHome, 'config.toml'),
      [
        'model = "gpt-5.4"',
        '',
        '[profiles.fast]',
        'model = "gpt-5.5-mini"',
        '',
        '[profiles."quoted.name"]',
        'model = "gpt-5.5"',
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cf9b0e18916b0dd6 — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:76

    await writeFile(path.join(codexHome, 'config.toml'), 'model = "gpt-5.4"\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #30b28101dc9000ab — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:94

    await writeFile(
      path.join(sessionDir, 'rollout-2026-06-11T01-31-27-thread-123.jsonl'),
      [
        JSON.stringify({ payload: { model_provider: 'openai' }, type: 'session_meta' }),
        JSON.stringify({ payload: { model_context_window: 258_400 }, type: 'turn_context' }),
        JSON.stringify({ payload: { model: 'gpt-5.5' }, type: 'event_msg' }),
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2f47cc40e0863c91 — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:117

    await writeFile(
      path.join(sessionDir, 'rollout-2026-06-11T01-31-27-thread-usage.jsonl'),
      [
        JSON.stringify({
          payload: {
            info: {
              total_token_usage: {
                cached_input_tokens: 5,
                input_tokens: 25,
                output_tokens: 9,
                reasoning_output_tokens: 4,
              },
            },
            type: 'token_count',
            usage: { input_tokens: 100, output_tokens: 100 },
          },
          type: 'event_msg',
          usage: { input_tokens: 200, output_tokens: 200 },
        }),
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #864ca7bdee312f0f — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:158

    await writeFile(
      path.join(sessionDir, 'rollout-2026-06-11T01-31-27-thread-legacy-usage.jsonl'),
      [
        JSON.stringify({
          payload: { usage: { input_tokens: 10, output_tokens: 2 } },
          type: 'event_msg',
        }),
        JSON.stringify({
          type: 'turn.completed',
          usage: { cached_input_tokens: 5, input_tokens: 25, output_tokens: 9 },
        }),
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ec841ee9b806f908 — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/codexModel.ts:189

    const config = await readFile(path.join(getCodexHome(env, homeDir), 'config.toml'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8425aef4c10f7930 — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/codexModel.ts:275

  const content = await readFile(sourceFile, 'utf8').catch(() => undefined);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cb9941a8e09cba3a — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/input/buildAgentInput.test.ts:67

      await writeFile(filePath, PNG_BYTES);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #be4e70147f692c50 — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/input/buildAgentInput.test.ts:197

      const written = await readFile(imagePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #443ed8e95bf9ec17 — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/input/buildAgentInput.test.ts:203

      await writeFile(filePath, PNG_BYTES);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2935f3be44d980af — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:137

      const meta = JSON.parse(await readFile(metaPath, 'utf8')) as { mediaType?: string };

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d83599c8b127267d — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:138

      const buffer = await readFile(dataPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #afe9120ddffe5486 — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:158

    await writeFile(path.join(cacheDir, key), buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7fe350b06bc56b09 — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:159

    await writeFile(
      path.join(cacheDir, `${key}.meta`),
      JSON.stringify({ id: source.id, mediaType }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #82aec367693b7acd — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:169

  const buffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #858f1cac6ba63365 — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:238

    await writeFile(filePath, image.buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ff7b0574f1c3f593 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:79

      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5ee7f846c8539788 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:80

      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6a5d407346ea256b — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:82

      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #edd25a375ec354a5 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:83

      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d95009c01231e0b9 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:102

        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1c803c9f06bafdaf — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:103

        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2c88165d9f6bb3a8 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:104

        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b72e0637f64bf542 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:109

      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a3e8a9dcf2f77c30 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:110

      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #531933e57248d481 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:111

      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1684eff120cb7b94 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:112

      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1230c03a8d1daab9 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:129

        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #be2cc713b7be86fa — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:130

        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1ca268bac79b941e — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:131

        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #810f38243131d924 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:136

      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cfc59ddd08944250 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:137

      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3651d74b7d62b60a — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:138

      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d04958863a98beb0 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:139

      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8fbeb075f2d3c906 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:152

        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a1e4a9f20025f0b5 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:153

        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dc53a2320b4a9c45 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:154

        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2d509faf0e560592 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:159

      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b7a3256ecda30078 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:160

      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #603a2511b86980c9 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:161

      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c87c044eee24d7ac — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:162

      process.env.SHELL = '/bin/zsh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #88f0b500dea15ebc — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:179

        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6b303611e633ca49 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:180

        process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c304c520f46fa50f — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:250

      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #84e83041a477bb6d — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:251

      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #369ccb156421f289 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:252

      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea2e9de8e85b0303 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:253

      process.env.SHELL = '/bin/zsh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #21436eec0ba42f58 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:267

        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b2beb6636d53e11b — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:268

        process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b7215588665a53ce — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:273

      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #95186c39b92bf88e — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:274

      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #84053e9cfeaefee3 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:277

      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f32c9954502f374c — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:278

      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e4b381b5cca416af — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:293

        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d459d47a3d3dde34 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:294

        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5e69375179a86415 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:295

        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3dd30c1a1f5c0788 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.ts:79

  const shell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c61ad45b8d5aa54b — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.ts:153

    const lookupPath = mergePathValues(shellPath, process.env.PATH);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aefe09f743965531 — Environment-variable access.

repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.ts:155

    if (lookupPath && lookupPath !== process.env.PATH) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #17a4260a0b6d4c78 — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/spawnAgent.test.ts:248

    const realCodexFixture = await readFile(
      new URL('../adapters/__fixtures__/codex/collab_tool_call.spawn_wait.jsonl', import.meta.url),
      'utf8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #264d000b174e1430 — Filesystem access.

repo/packages/heterogeneous-agents/src/spawn/spawnAgent.test.ts:256

    await writeFile(
      path.join(sessionDir, `rollout-2026-06-11T01-31-27-${threadId}.jsonl`),
      JSON.stringify({
        type: 'turn.completed',
        usage: { cached_input_tokens: 42_000, input_tokens: 51_000, output_tokens: 300 },
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): apps/desktop/src/main

npm first-party

expand_more 170 low-confidence finding(s)

low egress production #a12a7d8e58207c7b — Hardcoded external endpoint. Review what data is sent to this destination.

repo/apps/desktop/src/main/controllers/BrowserSidebarCtr.ts:54

    const searchUrl = new URL('https://www.bing.com/search');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #3a1f9ea80de32baa — Filesystem access.

repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:373

        readLocalFile: (p) => local.readFile(p),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4324d5e56b232a01 — Filesystem access.

repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:463

        return runtime.readFile({
          endLine: p.loc?.[1],
          path: p.path,
          startLine: p.loc?.[0],
        });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5f3748d2cfd29277 — Filesystem access.

repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:493

        return runtime.writeFile(args as WriteLocalFileParams);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d310859038cb2641 — Filesystem access.

repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:737

      const content = fs.readFileSync(soulPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8096d24383910d33 — Filesystem access.

repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:807

      const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #43091db1939cbc09 — Environment-variable access.

repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:853

      const openclawAgent = process.env['OPENCLAW_AGENT_ID'] ?? 'main';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7988072752dd9f45 — Environment-variable access.

repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:591

      String(process.env.LOBE_CLAUDE_CODE_SDK ?? '').toLowerCase(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #420cf2292f042755 — Environment-variable access.

repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:609

    if (process.env.NODE_ENV === 'test') return false;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #802aaac2d6e99458 — Filesystem access.

repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:710

      await writeFile(path.join(rootDir, '.last-live-trace'), `${dir}\n`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f9229218fc22d361 — Filesystem access.

repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:711

      await writeFile(path.join(dir, 'stdout.jsonl'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #00cbb99b25208732 — Filesystem access.

repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:712

      await writeFile(path.join(dir, 'stderr.log'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f83e8c9c7ccff7b6 — Filesystem access.

repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:714

        await writeFile(path.join(dir, 'stdin.txt'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8424bdfc507b8b0d — Filesystem access.

repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:716

      await writeFile(
        path.join(dir, 'meta.json'),
        `${JSON.stringify(
          {
            agentSessionId: session.agentSessionId,
            agentType: session.agentType,
            args: cliArgs,
            attachments: imageList.map((image) => this.getAttachmentTraceSummary(image)),
            command: session.command,
            createdAt: createdAt.toISOString(),
            cwd,
            envKeys: session.env ? Object.keys(session.env).sort() : [],
            model: session.model,
            modelSource: session.modelSource,
            resumeSessionId: session.resumeSessionId,
            sessionId: session.sessionId,
            stdinBytes: stdinPayload === undefined ? 0 : Buffer.byteLength(stdinPayload),
            stdinFile: stdinPayload === undefined ? undefined : 'stdin.txt',
            stderrFile: 'stderr.log',
            stdoutFile: 'stdout.jsonl',
            verifiedModel: session.verifiedModel,
            verifiedModelContextWindow: session.verifiedModelContextWindow,
            verifiedModelProvider: session.verifiedModelProvider,
            verifiedModelSessionId: session.verifiedModelSessionId,
            verifiedModelSourceFile: session.verifiedModelSourceFile,
          },
          null,
          2,
        )}\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a01cb229f05e29f7 — Filesystem access.

repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:787

    return this.queueCliTraceWrite(trace, () => writeFile(filePath, data));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c7df1821b4500480 — Filesystem access.

repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:875

    await writeFile(tmpConfigPath, JSON.stringify(config), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2e8e2351794dca1f — Filesystem access.

repo/apps/desktop/src/main/controllers/LocalFileCtr.ts:353

    const data = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #1fbc96cb728b160d — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:191

    originalClaudeSdkLabEnv = process.env.LOBE_CLAUDE_CODE_SDK;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c625231cb36ed43d — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:197

    delete process.env.LOBE_CLAUDE_CODE_SDK;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #59a20ec1c7d61b87 — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:201

    if (originalClaudeSdkLabEnv === undefined) delete process.env.LOBE_CLAUDE_CODE_SDK;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c383dd7b9686f4dc — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:202

    else process.env.LOBE_CLAUDE_CODE_SDK = originalClaudeSdkLabEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4594e734de9330de — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:264

      await writeFile(outOfRootDataPath, 'SECRET');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #685827379f45389e — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:265

      await writeFile(
        outOfRootMetaPath,
        JSON.stringify({ id: traversalId, mimeType: 'text/plain' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e7d2facc870e1cae — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:284

      await expect(readFile(outOfRootDataPath, 'utf8')).resolves.toBe('SECRET');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e042825331b84a0d — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:454

      process.env.LOBE_CLAUDE_CODE_SDK = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #372d5cfc07c7ff15 — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:558

        ANTHROPIC_API_KEY: process.env.ANTHROPIC_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #589a7351da54ffbc — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:559

        ANTHROPIC_AUTH_TOKEN: process.env.ANTHROPIC_AUTH_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a5acba0e3872b181 — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:560

        ANTHROPIC_BASE_URL: process.env.ANTHROPIC_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e1d7fe9d9a2f675b — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:562

      process.env.ANTHROPIC_API_KEY = 'sk-host-should-not-leak';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #80b67f7ffaa9dd0b — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:563

      process.env.ANTHROPIC_AUTH_TOKEN = 'host-token-should-not-leak';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #bd2eeda16007bf86 — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:564

      process.env.ANTHROPIC_BASE_URL = 'https://host.example/should-not-leak';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #6c2d5cbf917e6439 — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:573

        expect(options.env.PATH).toBe(process.env.PATH);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #adef3c0b0ebe333e — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:576

          if (value === undefined) delete process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f916abbae8ed0516 — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:577

          else process.env[key] = value;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #65fee9cf5224c336 — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:583

      const originalKey = process.env.ANTHROPIC_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #52d1bf32e0e7649d — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:584

      process.env.ANTHROPIC_API_KEY = 'sk-host-should-not-leak';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ccb42e2231eff41d — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:594

        if (originalKey === undefined) delete process.env.ANTHROPIC_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #97eaea7d55bc27ae — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:595

        else process.env.ANTHROPIC_API_KEY = originalKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #db3e08863a79eabc — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:855

        Promise.all(imagePaths.map((filePath) => readFile(filePath, 'utf8'))),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #bf0bdab8d579af5c — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:870

      await expect(readFile(imagePaths[0], 'utf8')).resolves.toBe('PNG_TEST');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #da67a97a32bdd936 — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:890

      await expect(readFile(imagePaths[0])).resolves.toEqual(pngBytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #7344df04cf6342e1 — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:962

      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2399bdf26c5c5f02 — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:963

      process.env.NODE_ENV = 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #0dd25ba5a2515930 — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:982

        await expect(readFile(path.join(traceRoot, '.last-live-trace'), 'utf8')).resolves.toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #0418b382dcde5328 — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:985

        await expect(readFile(path.join(traceDir, 'stdin.txt'), 'utf8')).resolves.toBe(prompt);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f2a13e3e7904d709 — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:986

        await expect(readFile(path.join(traceDir, 'stdout.jsonl'), 'utf8')).resolves.toBe(rawLine);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9e14e792dc1dddb0 — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:987

        await expect(readFile(path.join(traceDir, 'stderr.log'), 'utf8')).resolves.toBe('');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #993476558f1af3c6 — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:988

        await expect(readFile(path.join(traceDir, 'exit.json'), 'utf8')).resolves.toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #744a458488bac664 — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:992

        const meta = JSON.parse(await readFile(path.join(traceDir, 'meta.json'), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e55172dded9a5a31 — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1005

        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #41aa0799f9db2627 — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1010

      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ba754c68f2f27618 — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1012

      process.env.NODE_ENV = 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f570ab74fd369555 — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1031

        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3ce9f8e04d84b500 — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1036

      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #141f15510f3a8395 — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1039

      process.env.NODE_ENV = 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #93f3ba40cc4fcbeb — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1059

        await expect(readFile(path.join(traceDir, 'stdout.jsonl'), 'utf8')).resolves.toBe(rawLine);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8a1d97503d3b1980 — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1064

        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f5ba3ba62b3aee12 — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1070

      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #93b108e9fe464b98 — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1071

      process.env.NODE_ENV = 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b6aabfac5801476d — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1083

        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d677954d311bb673 — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1089

      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #56a69c6ea7fbf7b1 — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1090

      process.env.NODE_ENV = 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #5d30adf467df5f02 — Environment-variable access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1099

        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #29392b2513ce9ecb — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1470

      await writeFile(tmpConfigPath, '{"mcpServers":{}}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #45b00305ad65f60d — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:66

      await writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #14e60647cb56d8a9 — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:68

      const result = await localFileCtr.readFile({ path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #cd9a63396bcbb541 — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:86

      await writeFile(filePath, 'line1\nline2\nline3\nline4\nline5');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c6c0af1eb9fecf7d — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:88

      const result = await localFileCtr.readFile({ loc: [1, 3], path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #edc0b2b7a8a6f5b9 — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:107

      await writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4fd2308a8498e594 — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:109

      const result = await localFileCtr.readFile({ fullContent: true, path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2e83a2e447854317 — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:126

      const result = await localFileCtr.readFile({
        path: path.join(tmpDir, 'does-not-exist.txt'),
      });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #692e87ad71f141ca — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:154

      await writeFile(filePath, pngBytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #29347c3da0370f9f — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:156

      const result = await localFileCtr.readFile({ path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #257551a5d3391510 — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:173

      await writeFile(filePath, pngBytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #434a4a959cafc304 — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:175

      const result = await localFileCtr.readFile({ cwd: tmpDir, path: 'assets/nested.jpg' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ea0806f2927c40d6 — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:187

      await writeFile(filePath, pngBytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8e18e5d396b3f9ed — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:189

      const result = await localFileCtr.readFile({ path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #216be1cb7ba6d1a0 — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:200

      await writeFile(filePath, pngBytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #cbdfdd218e1863e0 — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:202

      const result = await localFileCtr.readFile({ path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #508fc1e7786d7194 — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:210

      const result = await localFileCtr.readFile({ path: path.join(tmpDir, 'missing.png') });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #102a5054dedd1d57 — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:220

      await writeFile(filePath, Buffer.alloc(10 * 1024 * 1024 + 1));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c5f78ee501933209 — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:222

      const result = await localFileCtr.readFile({ path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #32e4fae959175bc2 — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:233

      await writeFile(filePath, svg);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #00975aadea1401c6 — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:235

      const result = await localFileCtr.readFile({ path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2ea78d05e7345e1f — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:246

      await writeFile(file1, 'content a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #184be04e3670ffbd — Filesystem access.

repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:247

      await writeFile(file2, 'content b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9ac4dbe8791f0492 — Environment-variable access.

repo/apps/desktop/src/main/core/App.ts:102

    process.env.PATH = `${process.env.PATH}${pathSep}${getCliWrapperDir()}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #96cedcb89965b72d — Environment-variable access.

repo/apps/desktop/src/main/core/App.ts:475

    const ipcId = process.env.LOBE_IPC_ID || name;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c471abeecb42e169 — Environment-variable access.

repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:450

    const current = process.env.PATH ?? '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #31834c158cfd9bb4 — Environment-variable access.

repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:453

    process.env.PATH = current ? `${current}${sep}${dir}` : dir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #acf0df2fcb3c1539 — Filesystem access.

repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:552

    await writeFile(tmpMarker, resolvedVersion, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f938ee97d16b0eb4 — Filesystem access.

repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:554

    await writeFile(markerPath, resolvedVersion, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #db92663e4d453061 — Filesystem access.

repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:630

      const raw = await readFile(this.installedMarkerPath(name), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #18a38d0f7da2e9cb — Filesystem access.

repo/apps/desktop/src/main/core/infrastructure/LocalFileProtocolManager.ts:138

          const buffer = await readFile(realResolvedPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fdc74e95aa5bee2b — Filesystem access.

repo/apps/desktop/src/main/core/infrastructure/LocalFileProtocolManager.ts:289

    const buffer = await readFile(realFilePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea43971840caa37b — Filesystem access.

repo/apps/desktop/src/main/core/infrastructure/RendererProtocolManager.ts:195

    const buffer = await readFile(targetPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9a266ef90bad647a — Environment-variable access.

repo/apps/desktop/src/main/core/infrastructure/RendererUrlManager.ts:98

    const electronRendererUrl = process.env['ELECTRON_RENDERER_URL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #0d8e1770e24acb98 — Filesystem access.

repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:52

  await writeFile(path.join(dir, fileName), fileContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #5221cc21c7f1826a — Filesystem access.

repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:53

  await writeFile(path.join(cacheRoot, name, '.installed'), version, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #61a0a661aaadc5ab — Environment-variable access.

repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:65

  originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2e9d54855060b174 — Environment-variable access.

repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:69

  process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #53a1289b7f09fb3c — Filesystem access.

repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:176

      await writeFile(path.join(cacheRoot, 'foo', '.installed'), '1.0.0', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8018812694c47a1d — Environment-variable access.

repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:201

      const before = process.env.PATH ?? '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #320db530bc6f4271 — Environment-variable access.

repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:206

      expect((process.env.PATH ?? '').split(sep)).toContain(installDir);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #1c127a346cc8bb2c — Environment-variable access.

repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:210

      const segments = (process.env.PATH ?? '').split(sep);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #eebce0d63248ce60 — Environment-variable access.

repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:212

      expect(process.env.PATH).toContain(before);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #909b55d406ff0631 — Environment-variable access.

repo/apps/desktop/src/main/core/infrastructure/__tests__/RendererUrlManager.test.ts:54

    delete process.env['ELECTRON_RENDERER_URL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b79ef1c0f3fa35dc — Environment-variable access.

repo/apps/desktop/src/main/core/infrastructure/__tests__/RendererUrlManager.test.ts:95

      process.env['ELECTRON_RENDERER_URL'] = 'http://localhost:5173';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #bd89b3b7f31300d7 — Environment-variable access.

repo/apps/desktop/src/main/core/infrastructure/__tests__/RendererUrlManager.test.ts:121

      process.env['ELECTRON_RENDERER_URL'] = 'http://localhost:5173';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #32f830c5a51874c6 — Environment-variable access.

repo/apps/desktop/src/main/core/infrastructure/__tests__/RendererUrlManager.test.ts:142

      process.env['ELECTRON_RENDERER_URL'] = 'http://localhost:5173';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #11c48655fae92d6d — Environment-variable access.

repo/apps/desktop/src/main/env.ts:56

  DESKTOP_BACKEND_PROXY_RETHROW_ERRORS: process.env.DESKTOP_BACKEND_PROXY_RETHROW_ERRORS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #56f92a4c9f06eb32 — Environment-variable access.

repo/apps/desktop/src/main/env.ts:57

  DESKTOP_EXTERNAL_NAVIGATION_HOSTS: process.env.DESKTOP_EXTERNAL_NAVIGATION_HOSTS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a212bc512425c541 — Environment-variable access.

repo/apps/desktop/src/main/env.ts:58

  UPDATE_CHANNEL: process.env.UPDATE_CHANNEL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #57b3c70d7c16780b — Environment-variable access.

repo/apps/desktop/src/main/env.ts:59

  UPDATE_SERVER_URL: process.env.UPDATE_SERVER_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0454cf3605047e47 — Environment-variable access.

repo/apps/desktop/src/main/env.ts:108

      UPDATE_CHANNEL: z.string().optional().default(process.env.UPDATE_CHANNEL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #516998775881484a — Environment-variable access.

repo/apps/desktop/src/main/env.ts:112

      UPDATE_SERVER_URL: z.string().optional().default(process.env.UPDATE_SERVER_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b33583f3350ed6c2 — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:189

      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #460132cc0ae12b66 — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:190

      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #1b92bfbfe16553b6 — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:191

      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c25bdc8f71d8a346 — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:192

      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #77ff11ed4a61bcfc — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:211

        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #7e9f1657fb599d04 — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:212

        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3bf1eef969183e29 — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:213

        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a711c2c7b37cdd54 — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:218

      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #cf24a07ec1f0dfe7 — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:219

      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f98347bf6051c3b4 — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:220

      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b616406c467663ba — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:221

      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #851713874373932d — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:236

        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #dcafbe265ebae110 — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:237

        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #07e3442495fd8af9 — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:238

        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #1b1e58dd8d429b41 — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:243

      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #7bcd29a0e788b2a0 — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:244

      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d2a8bccf8b396b66 — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:247

      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #5c4efe9eeaf4683b — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:248

      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #0d128e34c836035c — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:267

        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #bec6b1ced21cfd40 — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:268

        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #13337689c7220079 — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:269

        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #fb1b1dcde16a349e — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:274

      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #46a686679e482539 — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:275

      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8fd99ebb8308d6ec — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:276

      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f8481a8795cf9358 — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:277

      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #76c8a0db15d624f8 — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:295

        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f4c0cade237a77e2 — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:296

        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b83c0e4b9bd53693 — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:297

        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #35e7633b07028bed — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:313

      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #47e9c4489684e50d — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:314

      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a734bdc0e2fbbc26 — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:315

      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #5f6ed194d7de00bb — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:316

      process.env.SHELL = '/bin/zsh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c2ff679ed6a8080b — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:354

        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #12bbf701be842f5a — Environment-variable access.

repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:355

        process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cec86e3bcdef2d67 — Environment-variable access.

repo/apps/desktop/src/main/modules/browser/importChromeLoginData.ts:44

          process.env.PROGRAMFILES || 'C:\\Program Files',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a03c2571dedd3e90 — Environment-variable access.

repo/apps/desktop/src/main/modules/browser/importChromeLoginData.ts:47

        userData: path.join(process.env.LOCALAPPDATA || '', 'Google/Chrome/User Data'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b45e94174292a8b1 — Filesystem access.

repo/apps/desktop/src/main/modules/browser/importChromeLoginData.ts:78

      const [port, browserPath] = (await readFile(portFile, 'utf8')).trim().split('\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b9e26b42399d1b65 — Filesystem access.

repo/apps/desktop/src/main/modules/browser/importChromeLoginData.ts:135

  const localState = JSON.parse(await readFile(localStatePath, 'utf8')) as ChromeLocalState;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #906dc7db92938a1e — Environment-variable access.

repo/apps/desktop/src/main/modules/cliEmbedding/generateCliWrapper.ts:16

  if (process.platform === 'linux' && process.env.APPIMAGE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #35b523dc454d5b6e — Environment-variable access.

repo/apps/desktop/src/main/modules/cliEmbedding/generateCliWrapper.ts:17

    return process.env.APPIMAGE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b37fc784355be69a — Filesystem access.

repo/apps/desktop/src/main/modules/cliEmbedding/generateCliWrapper.ts:95

  await writeFile(tmpPath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c7473e6b706fde28 — Environment-variable access.

repo/apps/desktop/src/main/modules/heterogeneousAgent/claudeCodeQuota.ts:55

): string | undefined => (options.env && key in options.env ? options.env[key] : process.env[key]);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2267517efab2802d — Filesystem access.

repo/apps/desktop/src/main/modules/heterogeneousAgent/claudeCodeQuota.ts:133

    return parseCredentialsJson(await readFile(path.join(configDir, '.credentials.json'), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7f2782f45773ee26 — Environment-variable access.

repo/apps/desktop/src/main/modules/heterogeneousAgent/claudeCodeQuota.ts:150

  asNonEmpty(process.env.CLAUDE_CONFIG_DIR);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #bc1d7517191ebb05 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/apps/desktop/src/main/modules/heterogeneousAgent/claudeCodeQuota.ts:310

    const response = await fetch(OAUTH_USAGE_URL, {
      headers: {
        'Authorization': `Bearer ${lookup.credentials.accessToken}`,
        'Content-Type': 'application/json',
        'User-Agent': OAUTH_USER_AGENT,
        'anthropic-beta': OAUTH_BETA_HEADER,
      },
      signal: controller.signal,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #c6684ae505ed4c1f — Environment-variable access.

repo/apps/desktop/src/main/modules/heterogeneousAgent/codexQuota.ts:98

  codexHomePath ?? env?.CODEX_HOME ?? process.env.CODEX_HOME ?? path.join(homedir(), '.codex');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #319008496935633c — Filesystem access.

repo/apps/desktop/src/main/modules/heterogeneousAgent/codexQuota.ts:195

    auth = JSON.parse(await readFile(authPath, 'utf8')) as CodexAuthFile;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #8f4b3a89fd15cc93 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/apps/desktop/src/main/modules/heterogeneousAgent/codexQuota.ts:230

    const response = await fetch(CODEX_RATE_LIMIT_RESET_CREDITS_URL, {
      ...auth,
      signal: controller.signal,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #8c73f201123bf0d9 — Filesystem access.

repo/apps/desktop/src/main/modules/openInApp/iconExtractor.ts:145

    const buf = await readFile(outPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5fa53d14e408b7a0 — Environment-variable access.

repo/apps/desktop/src/main/modules/terminal/index.ts:42

  if (process.platform === 'win32') return process.env.ComSpec || 'powershell.exe';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #01f906ae6a744af7 — Environment-variable access.

repo/apps/desktop/src/main/modules/terminal/index.ts:43

  return process.env.SHELL || (process.platform === 'darwin' ? '/bin/zsh' : '/bin/bash');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c6e21cfcc811bedc — Environment-variable access.

repo/apps/desktop/src/main/pre-app-init.ts:20

  const userDataOverride = process.env.LOBE_DESKTOP_USER_DATA_DIR;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #01d19544880ea280 — Filesystem access.

repo/apps/desktop/src/main/services/fileSrv.ts:100

      await writeFile(savedPath, buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3b05390620dd5166 — Filesystem access.

repo/apps/desktop/src/main/services/fileSrv.ts:112

      await writeFile(metaFilePath, JSON.stringify(metadata, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): e2e

npm first-party

expand_more 28 low-confidence finding(s)

low env_fs production #6570fe4fdd443e63 — Environment-variable access.

repo/e2e/cucumber.config.js:4

const reportsEnabled = !['0', 'false'].includes(String(process.env.E2E_REPORTS).toLowerCase());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d7f82784db0057fb — Environment-variable access.

repo/e2e/cucumber.config.js:5

const parsedParallel = Number(process.env.E2E_PARALLEL || process.env.CUCUMBER_PARALLEL || 1);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #49596dcc76a7457f — Environment-variable access.

repo/e2e/cucumber.config.js:7

const canRunInParallel = Boolean(process.env.BASE_URL);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b25a2f56b3d374a4 — Environment-variable access.

repo/e2e/src/steps/auth/oidc-device-flow.steps.ts:48

  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #43b967a6bd2c5adb — Environment-variable access.

repo/e2e/src/steps/common/auth.steps.ts:36

  const PORT = process.env.PORT ? Number(process.env.PORT) : 3006;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #956fe2f30a021947 — Environment-variable access.

repo/e2e/src/steps/common/auth.steps.ts:37

  const baseURL = process.env.BASE_URL || `http://localhost:${PORT}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low pii_flow production #9376475dc11d3c43 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Same-origin destination — not external exfiltration.

repo/e2e/src/steps/common/auth.steps.ts:41 · flow /tmp/closeopen-c0i_3jq8/repo/e2e/src/steps/common/auth.steps.ts:36 → /tmp/closeopen-c0i_3jq8/repo/e2e/src/steps/common/auth.steps.ts:41

    const response = await api.post('/api/auth/sign-in/email', {
      data: {
        email: TEST_USER.email,
        password: TEST_USER.password,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs production #b15132fe69195eb2 — Environment-variable access.

repo/e2e/src/steps/home/sidebarAgent.steps.ts:62

  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d6e5bba6fb8ae9f1 — Environment-variable access.

repo/e2e/src/steps/home/sidebarGroup.steps.ts:22

  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aab0e724657b874e — Environment-variable access.

repo/e2e/src/steps/hooks.ts:9

process.env['E2E'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #becb63427e92ddfc — Environment-variable access.

repo/e2e/src/steps/hooks.ts:20

  const PORT = process.env.PORT ? Number(process.env.PORT) : 3006;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #16eb08319bbc9e50 — Environment-variable access.

repo/e2e/src/steps/hooks.ts:21

  baseUrl = process.env.BASE_URL || `http://localhost:${PORT}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #061a780681eacf0f — Environment-variable access.

repo/e2e/src/steps/hooks.ts:29

  if (!process.env.BASE_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ca7194c02f6dfab5 — Environment-variable access.

repo/e2e/src/steps/hooks.ts:33

      reuseExistingServer: !process.env.CI,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low pii_flow production #018cf693b7406b95 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Same-origin destination — not external exfiltration.

repo/e2e/src/steps/hooks.ts:42 · flow /tmp/closeopen-c0i_3jq8/repo/e2e/src/steps/hooks.ts:20 → /tmp/closeopen-c0i_3jq8/repo/e2e/src/steps/hooks.ts:42

    const response = await api.post('/api/auth/sign-in/email', {
      data: {
        email: TEST_USER.email,
        password: TEST_USER.password,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs production #736f6bf8024c10c6 — Environment-variable access.

repo/e2e/src/steps/hooks.ts:140

  if (!process.env.BASE_URL && process.env.CI) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ba0ce3386392b87a — Environment-variable access.

repo/e2e/src/support/seedTestUser.ts:5

const runId = process.env.E2E_RUN_ID || process.env.GITHUB_RUN_ID || 'local';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #621dec0bfb2136b6 — Environment-variable access.

repo/e2e/src/support/seedTestUser.ts:6

const workerId = process.env.CUCUMBER_WORKER_ID || process.env.E2E_WORKER_ID || 'local';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #78dbaa5d2f99ad16 — Environment-variable access.

repo/e2e/src/support/seedTestUser.ts:33

  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4f76dca042c93b49 — Environment-variable access.

repo/e2e/src/support/seedTestUser.ts:106

  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6055147cbe6b067b — Environment-variable access.

repo/e2e/src/support/seedTestUser.ts:142

  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #13f0712a3a6df8cc — Environment-variable access.

repo/e2e/src/support/webServer.ts:39

  const envHost = process.env.HOST?.trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #85ce5d9284148c04 — Filesystem access.

repo/e2e/src/support/webServer.ts:110

    writeFileSync(LOCK_FILE, String(process.pid));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #233fd39b05d7c4bb — Environment-variable access.

repo/e2e/src/support/webServer.ts:147

      JWKS_KEY: process.env.JWKS_KEY || createTestOidcJwks(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bfd100fb7736f4d1 — Environment-variable access.

repo/e2e/src/support/world.ts:27

      headless: process.env.HEADLESS !== 'false',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1160de9cd5e4ce96 — Environment-variable access.

repo/e2e/src/support/world.ts:66

    const PORT = process.env.PORT ? Number(process.env.PORT) : 3006;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9599b894008ae93a — Environment-variable access.

repo/e2e/src/support/world.ts:67

    const BASE_URL = process.env.BASE_URL || `http://localhost:${PORT}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8fe2b9b1344d1c08 — Filesystem access.

repo/e2e/src/support/world.ts:110

    fs.writeFileSync(filepath, screenshot);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/agent-runtime

npm first-party

expand_more 3 low-confidence finding(s)

low env_fs test-only #b9c7ac370ee9fa31 — Environment-variable access.

repo/packages/agent-runtime/examples/tools-calling.ts:10

    apiKey: process.env.OPENAI_API_KEY || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #5137345b433d910c — Environment-variable access.

repo/packages/agent-runtime/examples/tools-calling.ts:237

  if (!process.env.OPENAI_API_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #0ca33af92e08e403 — Filesystem access.

repo/packages/agent-runtime/src/agents/__tests__/GraphAgent.test.ts:104

    readFileSync(path.join(TEST_DIR, 'fixtures/goal-loop.graph.json'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/agent-tracing

npm first-party

expand_more 17 low-confidence finding(s)

low env_fs production #c02d8be700ee82b9 — Filesystem access.

repo/packages/agent-tracing/src/cli/ctx-lint.ts:67

      const snap = JSON.parse(await readFile(path.join(dir, f), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #be6e32e09be686d8 — Filesystem access.

repo/packages/agent-tracing/src/cli/ctx-lint.ts:109

            : [JSON.parse(await readFile(target, 'utf8'))];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cfd1eaf11b6c8d61 — Filesystem access.

repo/packages/agent-tracing/src/cli/tool-quality.ts:57

      out.push(JSON.parse(await readFile(path.join(dir, f), 'utf8')));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #253c4abe9f90cdc3 — Filesystem access.

repo/packages/agent-tracing/src/cli/tool-quality.ts:195

            snapshot = JSON.parse(await readFile(file, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #994d65170f42bde8 — Filesystem access.

repo/packages/agent-tracing/src/store/file-store.ts:27

    await fs.writeFile(filePath, JSON.stringify(snapshot, null, 2), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e49c2cbeb5373f18 — Filesystem access.

repo/packages/agent-tracing/src/store/file-store.ts:46

      const content = await fs.readFile(path.join(this.dir, match), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ba10c95cd6da7bf0 — Filesystem access.

repo/packages/agent-tracing/src/store/file-store.ts:66

        const content = await fs.readFile(path.join(this.dir, file), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #26415ea20063d84f — Filesystem access.

repo/packages/agent-tracing/src/store/file-store.ts:81

      const content = await fs.readFile(realPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9cc8614088130733 — Filesystem access.

repo/packages/agent-tracing/src/store/file-store.ts:88

      const content = await fs.readFile(path.join(this.dir, files[0]), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a924a0fc25863c00 — Filesystem access.

repo/packages/agent-tracing/src/store/file-store.ts:122

      const content = await fs.readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9ea19081bf1fd161 — Filesystem access.

repo/packages/agent-tracing/src/store/file-store.ts:129

      const content = await fs.readFile(path.join(this.partialDir(), match), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #21e56be82fb97fb6 — Filesystem access.

repo/packages/agent-tracing/src/store/file-store.ts:136

      const content = await fs.readFile(this.partialPath(operationId), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8cf185a6a42c3349 — Filesystem access.

repo/packages/agent-tracing/src/store/file-store.ts:145

    await fs.writeFile(this.partialPath(operationId), JSON.stringify(partial), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #36540753811c4e0b — Environment-variable access.

repo/packages/agent-tracing/src/store/remote-store.ts:57

  if (process.env.TRACING_BASE_URL) return process.env.TRACING_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #964683425e54da68 — Filesystem access.

repo/packages/agent-tracing/src/store/remote-store.ts:63

    const content = await fs.readFile(envPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #04d01a2545e12326 — Filesystem access.

repo/packages/agent-tracing/src/store/remote-store.ts:92

      const content = await fs.readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c0bd297de1cee907 — Filesystem access.

repo/packages/agent-tracing/src/store/remote-store.ts:148

    await fs.writeFile(filePath, JSON.stringify(snapshot, null, 2), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/app-config

npm first-party

expand_more 11 low-confidence finding(s)

low env_fs production #afcf6b72286e93d7 — Environment-variable access.

repo/packages/app-config/src/composio.ts:8

      COMPOSIO_API_KEY: process.env.COMPOSIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #740e32a96f882cd1 — Environment-variable access.

repo/packages/app-config/src/composio.ts:9

      COMPOSIO_AUTH_CONFIG_IDS: process.env.COMPOSIO_AUTH_CONFIG_IDS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5290da965bf47ccf — Environment-variable access.

repo/packages/app-config/src/db.ts:7

      DATABASE_DRIVER: process.env.DATABASE_DRIVER || 'neon',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #12b43a9af891066e — Environment-variable access.

repo/packages/app-config/src/db.ts:8

      DATABASE_STATEMENT_TIMEOUT: process.env.DATABASE_STATEMENT_TIMEOUT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c31bdd8741af52ab — Environment-variable access.

repo/packages/app-config/src/db.ts:9

      DATABASE_TEST_URL: process.env.DATABASE_TEST_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #72d90a101989f0c1 — Environment-variable access.

repo/packages/app-config/src/db.ts:10

      DATABASE_URL: process.env.DATABASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6554cad3b00a8e2e — Environment-variable access.

repo/packages/app-config/src/db.ts:12

      KEY_VAULTS_SECRET: process.env.KEY_VAULTS_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8400eece4815fc65 — Environment-variable access.

repo/packages/app-config/src/db.ts:14

      REMOVE_GLOBAL_FILE: process.env.DISABLE_REMOVE_GLOBAL_FILE !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0ddba4f5bef6cd0c — Environment-variable access.

repo/packages/app-config/src/featureFlags/index.ts:11

    FEATURE_FLAGS: process.env.FEATURE_FLAGS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #868f9c8e5c4ae4b2 — Environment-variable access.

repo/packages/app-config/src/featureFlags/schema.ts:5

const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e1e40a2b5809d6bd — Environment-variable access.

repo/packages/app-config/src/messenger.ts:36

      LOBE_LINK_TOKEN_TTL_SECONDS: process.env.LOBE_LINK_TOKEN_TTL_SECONDS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/builtin-tool-cloud-sandbox

npm first-party

expand_more 2 low-confidence finding(s)

low env_fs production #c7c048fcf8346407 — Filesystem access.

repo/packages/builtin-tool-cloud-sandbox/src/executor/index.ts:101

    const result = await runtime.readFile(params);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0f4cf9a4cfabe19f — Filesystem access.

repo/packages/builtin-tool-cloud-sandbox/src/executor/index.ts:110

    const result = await runtime.writeFile(params);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/builtin-tool-creds

npm first-party

expand_more 1 low-confidence finding(s)

low env_fs production #0ed65d2a2af1d791 — Environment-variable access.

repo/packages/builtin-tool-creds/src/ExecutionRuntime/index.ts:171

      const appUrl = (process.env.APP_URL || OFFICIAL_URL).replace(/\/+$/, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/builtin-tool-local-system

npm first-party

expand_more 2 low-confidence finding(s)

low env_fs production #14f7f5ca8cbb2237 — Filesystem access.

repo/packages/builtin-tool-local-system/src/client/executor/index.ts:105

      const result = await this.runtime.readFile({
        endLine: params.loc?.[1],
        path: params.path,
        startLine: params.loc?.[0],
      });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d95b452b66062b4c — Filesystem access.

repo/packages/builtin-tool-local-system/src/client/executor/index.ts:154

      const result = await this.runtime.writeFile(params);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/builtin-tool-skills

npm first-party

expand_more 2 low-confidence finding(s)

low env_fs production #eb670ba0295accf1 — Filesystem access.

repo/packages/builtin-tool-skills/src/ExecutionRuntime/index.ts:320

        const content = await this.deviceFileAccess.readFile(fullPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #89882ed40ba4fbc0 — Filesystem access.

repo/packages/builtin-tool-skills/src/ExecutionRuntime/index.ts:408

        let content = await this.deviceFileAccess.readFile(projectSkill.location);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/chat-adapter-qq

npm first-party

expand_more 1 low-confidence finding(s)

low egress production #b9003dad8bcdd1e1 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/chat-adapter-qq/src/api.ts:29

    const response = await fetch(AUTH_URL, {
      body: JSON.stringify({
        appId: this.appId,
        clientSecret: this.clientSecret,
      }),
      headers: { 'Content-Type': 'application/json' },
      method: 'POST',
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

first-party (npm): packages/database

npm first-party

expand_more 25 low-confidence finding(s)

low env_fs production #f48b3cbae9d4c2be — Environment-variable access.

repo/packages/database/src/core/getTestDB.ts:19

const isServerDBMode = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e23104bcac5f1eb7 — Environment-variable access.

repo/packages/database/src/core/web-server.ts:14

  if (process.env.NODE_ENV === 'test') return {} as LobeChatDatabase;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c43b25a2a858976f — Environment-variable access.

repo/packages/database/src/core/web-server.ts:57

  if (process.env.MIGRATION_DB === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #69e0df530c48ad82 — Environment-variable access.

repo/packages/database/src/models/__tests__/apiKey.test.ts:21

  originalKeyVaultsSecret = process.env.KEY_VAULTS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c94dd0f495dba792 — Environment-variable access.

repo/packages/database/src/models/__tests__/apiKey.test.ts:22

  process.env.KEY_VAULTS_SECRET = validKeyVaultsSecret;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f5fb702bdfdec731 — Environment-variable access.

repo/packages/database/src/models/__tests__/apiKey.test.ts:31

  process.env.KEY_VAULTS_SECRET = originalKeyVaultsSecret;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8639cee29f23df5f — Environment-variable access.

repo/packages/database/src/models/__tests__/apiKey.test.ts:177

      process.env.KEY_VAULTS_SECRET = 'Q10pwdq00KXUu9R+c8A8p4PSlIRWi7KwgUophBtkHVk=';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c5e04ed625ca7da2 — Filesystem access.

repo/packages/database/src/models/__tests__/jsonbNullTest.test.ts:42

      readFileSync(file, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ca1c56f0f3ff860a — Environment-variable access.

repo/packages/database/src/models/__tests__/messages/message.query.test.ts:1487

  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #87a0f567f1e66b48 — Environment-variable access.

repo/packages/database/src/models/__tests__/session.test.ts:287

  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #54b995eb41afd2e9 — Environment-variable access.

repo/packages/database/src/models/__tests__/topics/topic.query.test.ts:1553

  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8d73eda4010d01e7 — Environment-variable access.

repo/packages/database/src/models/userMemory/__tests__/activity.test.ts:240

    const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d373ae90d1ff4a19 — Environment-variable access.

repo/packages/database/src/models/userMemory/__tests__/experience.test.ts:437

    const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b96314cf6fdb3d68 — Environment-variable access.

repo/packages/database/src/models/userMemory/__tests__/identity.test.ts:455

    const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #5592be4e5e061c4a — Environment-variable access.

repo/packages/database/src/models/userMemory/__tests__/model.test.ts:523

      const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #eba32b163bd4ad19 — Environment-variable access.

repo/packages/database/src/repositories/home/__tests__/index.test.ts:457

  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d3b0edcb02606799 — Environment-variable access.

repo/packages/database/src/repositories/home/index.test.ts:788

  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b4de2668ac2a8c65 — Environment-variable access.

repo/packages/database/src/repositories/search/index.test.ts:36

const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #27981ad0815f1d33 — Filesystem access.

repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:66

      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c84935a07527020b — Filesystem access.

repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:120

      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2bfcc39c5b94ef2f — Filesystem access.

repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:175

      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #67c3cd3b11d8c98e — Filesystem access.

repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:209

      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c67d15b710cd7f85 — Filesystem access.

repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:234

      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b3b63527b6f4344d — Environment-variable access.

repo/packages/database/src/server/models/__tests__/user.test.ts:25

  process.env.KEY_VAULTS_SECRET = 'ofQiJCXLF8mYemwfMWLOHoHimlPu91YmLfU7YZ4lreQ=';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #880ac1ae2fe543ac — Environment-variable access.

repo/packages/database/src/server/models/__tests__/user.test.ts:31

  process.env.KEY_VAULTS_SECRET = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/device-control

npm first-party

expand_more 31 low-confidence finding(s)

low env_fs test-only #73a686afc2414246 — Filesystem access.

repo/packages/device-control/src/__tests__/dispatch.test.ts:19

  await writeFile(
    path.join(root, '.agents', 'skills', 'spa-routes', 'SKILL.md'),
    '---\nname: spa-routes\ndescription: SPA routing\n---\nbody',
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b7d9ec37b6da552b — Filesystem access.

repo/packages/device-control/src/__tests__/dispatch.test.ts:23

  await writeFile(path.join(root, 'AGENTS.md'), '# Agents');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #49860636cfc91660 — Filesystem access.

repo/packages/device-control/src/__tests__/dispatch.test.ts:79

    await writeFile(
      path.join(deviceSkillRoot, 'device-writer', 'SKILL.md'),
      '---\nname: device-writer\ndescription: Device writer\n---\nbody',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #7a8ba046e43c3047 — Filesystem access.

repo/packages/device-control/src/__tests__/dispatch.test.ts:84

    await writeFile(
      path.join(deviceSkillRoot, 'spa-routes', 'SKILL.md'),
      '---\nname: spa-routes\ndescription: Device duplicate\n---\nbody',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f13bb2dc1524ed4a — Filesystem access.

repo/packages/device-control/src/__tests__/dispatch.test.ts:112

    await writeFile(
      path.join(root, '.agents', 'skills', 'agent-testing', 'SKILL.md'),
      [
        '---',
        'name: agent-testing',
        'description: >',
        '  Agentic end-to-end testing for LobeHub: backend verification via the CLI,',
        '  frontend verification via agent-browser (Electron).',
        '---',
        'body',
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #cefbdca52a04ef1c — Filesystem access.

repo/packages/device-control/src/__tests__/dispatch.test.ts:165

    await writeFile(oldPath, 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e13c9133cf8458be — Filesystem access.

repo/packages/device-control/src/__tests__/dispatch.test.ts:180

    await writeFile(filePath, 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #481a8a19dbbf8eb1 — Filesystem access.

repo/packages/device-control/src/__tests__/dispatch.test.ts:202

    expect(await readFile(filePath, 'utf8')).toBe('remote edit');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #06e2629e121136d9 — Filesystem access.

repo/packages/device-control/src/__tests__/filePreview.test.ts:15

  await writeFile(path.join(root, 'note.txt'), 'hello preview\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #fc0616ae7ca3e098 — Filesystem access.

repo/packages/device-control/src/__tests__/filePreview.test.ts:16

  await writeFile(path.join(root, 'pic.png'), Buffer.from([0x89, 0x50, 0x4e, 0x47, 1, 2, 3]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ca90c2778e310012 — Filesystem access.

repo/packages/device-control/src/__tests__/filePreview.test.ts:17

  await writeFile(path.join(outside, 'secret.txt'), 'do not read\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d5e7e30b97bc215f — Filesystem access.

repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:25

    await writeFile(path.join(dir, 'src', 'index.ts'), 'export const a = 1;\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c84db705055588e3 — Filesystem access.

repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:26

    await writeFile(path.join(dir, 'README.md'), '# hi\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f868703a59fe13bb — Filesystem access.

repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:30

    await writeFile(path.join(dir, 'scratch.txt'), 'tmp\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #eaffe40aa5bafeef — Filesystem access.

repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:49

    await writeFile(path.join(dir, 'one.txt'), '1\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ffc44666c9652b99 — Filesystem access.

repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:50

    await writeFile(path.join(dir, 'nested', 'deep', 'two.txt'), '2\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9762021e6debc1d8 — Filesystem access.

repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:51

    await writeFile(path.join(dir, '.agents', 'config.md'), '# cfg\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #09eda87e8444868c — Filesystem access.

repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:80

    await writeFile(
      path.join(dir, 'src', 'components', 'Button.tsx'),
      'export const Button = 1;\n',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #29f88f3b74ea363b — Filesystem access.

repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:84

    await writeFile(path.join(dir, 'src', 'components', 'Input.tsx'), 'export const Input = 1;\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #08f2664d2b6671b4 — Filesystem access.

repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:102

    await writeFile(path.join(dir, 'nested', 'deep', 'target-file.ts'), 'target\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3b32ff07411e746f — Filesystem access.

repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:103

    await writeFile(path.join(dir, 'nested', 'deep', 'other.ts'), 'other\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9bab442be142d6a3 — Filesystem access.

repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:119

    await writeFile(path.join(dir, '.agents', 'skills', 'target-skill.md'), 'skill\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e3785de9f018978e — Filesystem access.

repo/packages/device-control/src/__tests__/skillDirectory.test.ts:45

    await expect(readFile(path.join(result.extractedDir, 'SKILL.md'), 'utf8')).resolves.toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #7e6d8a8e8dff54cb — Filesystem access.

repo/packages/device-control/src/__tests__/skillDirectory.test.ts:49

      readFile(path.join(result.extractedDir, 'scripts', 'run.sh'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f29918ebe72bc027 — Filesystem access.

repo/packages/device-control/src/__tests__/skillDirectory.test.ts:51

    const marker = JSON.parse(await readFile(path.join(result.extractedDir, '.prepared'), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #849f60b0bb7774e7 — Filesystem access.

repo/packages/device-control/src/filePreview.ts:121

    const buffer = await readFile(realFile);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9cee23c6d32480ac — Filesystem access.

repo/packages/device-control/src/skillDirectory.ts:99

      await writeFile(zipPath, buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #00c855f2a82d1fd1 — Filesystem access.

repo/packages/device-control/src/skillDirectory.ts:111

        await writeFile(targetPath, Buffer.from(fileContent as Uint8Array));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1b84e6561e779f79 — Filesystem access.

repo/packages/device-control/src/skillDirectory.ts:114

      await writeFile(
        path.join(stagingDir, '.prepared'),
        JSON.stringify({ preparedAt: Date.now(), url, zipHash }),
        'utf8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6b968f1ecd111f39 — Filesystem access.

repo/packages/device-control/src/workspace.ts:142

          const raw = await readFile(skillFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a02f7c865ab22ffa — Filesystem access.

repo/packages/device-control/src/workspace.ts:204

      const raw = await readFile(path.join(root, source), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/device-gateway-client

npm first-party

expand_more 3 low-confidence finding(s)

low pii_flow production #12601a950c4556ce — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Same-origin destination — not external exfiltration.

repo/packages/device-gateway-client/src/http.ts:127 · flow /tmp/closeopen-c0i_3jq8/repo/packages/device-gateway-client/src/http.ts:134 → /tmp/closeopen-c0i_3jq8/repo/packages/device-gateway-client/src/http.ts:127

    const res = await this.post(
      '/api/device/tool-call',
      {
        deviceId: params.deviceId,
        operationId: params.operationId,
        timeout: params.timeout,
        toolCall,
        userId: params.userId,
        workspaceId: params.workspaceId,
      },
      { timeout: timeout + HTTP_CALL_TIMEOUT_PADDING_MS },
    );

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low pii_flow production #cdb3dcc601eec9c0 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Same-origin destination — not external exfiltration.

repo/packages/device-gateway-client/src/http.ts:175 · flow /tmp/closeopen-c0i_3jq8/repo/packages/device-gateway-client/src/http.ts:179 → /tmp/closeopen-c0i_3jq8/repo/packages/device-gateway-client/src/http.ts:175

    const res = await this.post('/api/device/message-api', {
      api,
      deviceId: params.deviceId,
      timeout: params.timeout,
      userId: params.userId,
      workspaceId: params.workspaceId,
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low pii_flow production #aad12880fa547735 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Same-origin destination — not external exfiltration.

repo/packages/device-gateway-client/src/http.ts:250 · flow /tmp/closeopen-c0i_3jq8/repo/packages/device-gateway-client/src/http.ts:257 → /tmp/closeopen-c0i_3jq8/repo/packages/device-gateway-client/src/http.ts:250

    const res = await this.post(
      '/api/device/rpc',
      {
        deviceId: params.deviceId,
        method: rpc.method,
        params: rpc.params,
        timeout: params.timeout,
        userId: params.userId,
        workspaceId: params.workspaceId,
      },
      { timeout: timeout + HTTP_CALL_TIMEOUT_PADDING_MS },
    );

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

first-party (npm): packages/electron-server-ipc

npm first-party

expand_more 2 low-confidence finding(s)

low env_fs production #90d144fb4ea45537 — Filesystem access.

repo/packages/electron-server-ipc/src/ipcClient.ts:50

        const socketInfo = JSON.parse(fs.readFileSync(socketInfoPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #358251580f32b3b4 — Filesystem access.

repo/packages/electron-server-ipc/src/ipcServer.ts:56

        fs.writeFileSync(socketInfoPath, JSON.stringify({ socketPath: this.socketPath }), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/env

npm first-party

expand_more 430 low-confidence finding(s)

low env_fs test-only #55ebf3991d4b35a7 — Environment-variable access.

repo/packages/env/src/__tests__/analytics.test.ts:19

    process.env.PLAUSIBLE_DOMAIN = 'example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #cc48454cf3d0c013 — Environment-variable access.

repo/packages/env/src/__tests__/analytics.test.ts:20

    process.env.POSTHOG_KEY = 'posthog_key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8258952f20e9031f — Environment-variable access.

repo/packages/env/src/__tests__/analytics.test.ts:21

    process.env.UMAMI_WEBSITE_ID = 'umami_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #dd2c99c4bd1778f2 — Environment-variable access.

repo/packages/env/src/__tests__/analytics.test.ts:22

    process.env.CLARITY_PROJECT_ID = 'clarity_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #44523c3295d8df46 — Environment-variable access.

repo/packages/env/src/__tests__/analytics.test.ts:23

    process.env.ENABLE_VERCEL_ANALYTICS = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #1693fe42929b19a6 — Environment-variable access.

repo/packages/env/src/__tests__/analytics.test.ts:24

    process.env.GOOGLE_ANALYTICS_MEASUREMENT_ID = 'ga_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ff08cecb0c3c0b38 — Environment-variable access.

repo/packages/env/src/__tests__/analytics.test.ts:25

    process.env.X_ADS_PIXEL_ID = 'tw-pixel_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #01cc01b2c2131e2b — Environment-variable access.

repo/packages/env/src/__tests__/analytics.test.ts:26

    process.env.X_ADS_LOGIN_OR_SIGNUP_CLICKED_EVENT_ID = 'tw-pixel_id-login_or_signup_clicked';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4c12061671fb3523 — Environment-variable access.

repo/packages/env/src/__tests__/analytics.test.ts:27

    process.env.X_ADS_MAIN_PAGE_VIEW_EVENT_ID = 'tw-pixel_id-main_page_view';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #67f4e64bc4949e93 — Environment-variable access.

repo/packages/env/src/__tests__/analytics.test.ts:28

    process.env.X_ADS_PURCHASE_EVENT_ID = 'tw-pixel_id-purchase_event_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c0e221a4e34564ec — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:23

      process.env.AGENTS_INDEX_URL = 'https://custom-agents-url.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a5ed6ffef2c69a94 — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:24

      process.env.PLUGINS_INDEX_URL = 'https://custom-plugins-url.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f4d4c4b08bae9615 — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:32

      process.env.AGENTS_INDEX_URL = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #453d8d708e0284de — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:33

      process.env.PLUGINS_INDEX_URL = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #5b5d9373d7c96fb7 — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:48

      process.env.APP_URL = 'https://example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f329382d30e335b4 — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:49

      delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #6c8e8287d0019e96 — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:57

      process.env.APP_URL = 'https://public.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3775b35da16dec84 — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:58

      process.env.INTERNAL_APP_URL = 'http://localhost:3210';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #bd02b9a3a3ef3c6e — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:66

      process.env.APP_URL = 'https://public.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #385041c0d6e5cd5b — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:67

      process.env.INTERNAL_APP_URL = 'http://internal-service:3210';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #47f3597e12040ce5 — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:76

      process.env.APP_URL = 'https://cloudflare-proxied.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #656abff25e84e46e — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:77

      process.env.INTERNAL_APP_URL = 'http://127.0.0.1:3210';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #37451bb8b788177c — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:90

    delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3337316b2d0fa3f0 — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:91

    delete process.env.VERCEL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #365980694ae7bc8d — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:92

    delete process.env.VERCEL_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #aaa51b4aab01bb2b — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:93

    delete process.env.VERCEL_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a88329cacb8bba92 — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:94

    delete process.env.VERCEL_BRANCH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #028d02c75d88dcdd — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:95

    delete process.env.VERCEL_PROJECT_PRODUCTION_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d9d7345d1a4625ea — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:99

    process.env.APP_URL = 'https://custom-app.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #74f35584040c27e6 — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:100

    process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e90ace021d330e51 — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:109

      process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c7adc84ad2f3556a — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:110

      process.env.VERCEL_ENV = 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #add57ab5c4db6aff — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:111

      process.env.VERCEL_PROJECT_PRODUCTION_URL = 'lobechat.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #925bcbdeb191de3f — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:112

      process.env.VERCEL_BRANCH_URL = 'lobechat-git-main-org.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #29a4bab5c686552a — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:113

      process.env.VERCEL_URL = 'lobechat-abc123.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ff7197816e4b00d7 — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:121

      process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #5ee7ed0facce7d7f — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:122

      process.env.VERCEL_ENV = 'preview';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #71fb4ff419a612ce — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:123

      process.env.VERCEL_BRANCH_URL = 'lobechat-git-feature-org.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #7aa52020034a904c — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:124

      process.env.VERCEL_URL = 'lobechat-abc123.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #762d6f12fbc778ea — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:132

      process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #98c01b3fdf6953c6 — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:133

      process.env.VERCEL_ENV = 'preview';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #7bb5a23ede2e997c — Environment-variable access.

repo/packages/env/src/__tests__/app.test.ts:134

      process.env.VERCEL_BRANCH_URL = 'lobechat-git-feature-org.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #44a96589197c26a6 — Environment-variable access.

repo/packages/env/src/__tests__/client.test.ts:13

    process.env.NEXT_PUBLIC_ANALYTICS_PLAUSIBLE = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #0275e28c715d6879 — Environment-variable access.

repo/packages/env/src/__tests__/client.test.ts:14

    process.env.NEXT_PUBLIC_ANALYTICS_POSTHOG = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #081f741ca210cd56 — Environment-variable access.

repo/packages/env/src/__tests__/client.test.ts:15

    process.env.NEXT_PUBLIC_POSTHOG_DEBUG = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d562527024147765 — Environment-variable access.

repo/packages/env/src/__tests__/client.test.ts:16

    process.env.NEXT_PUBLIC_I18N_DEBUG = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b8e1842aaebbe897 — Environment-variable access.

repo/packages/env/src/__tests__/client.test.ts:17

    process.env.NEXT_PUBLIC_I18N_DEBUG_BROWSER = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #45eaf68190b3a344 — Environment-variable access.

repo/packages/env/src/__tests__/client.test.ts:18

    process.env.NEXT_PUBLIC_I18N_DEBUG_SERVER = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b651a5c2fde7212a — Environment-variable access.

repo/packages/env/src/__tests__/client.test.ts:27

    process.env.NEXT_PUBLIC_ANALYTICS_PLAUSIBLE = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #28e3256e930effe6 — Environment-variable access.

repo/packages/env/src/__tests__/client.test.ts:28

    process.env.NEXT_PUBLIC_ANALYTICS_POSTHOG = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9df7e254307ba53d — Environment-variable access.

repo/packages/env/src/__tests__/client.test.ts:29

    process.env.NEXT_PUBLIC_POSTHOG_DEBUG = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #574b58b9ea48655f — Environment-variable access.

repo/packages/env/src/__tests__/client.test.ts:30

    process.env.NEXT_PUBLIC_I18N_DEBUG = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #1f27a36d9008f20e — Environment-variable access.

repo/packages/env/src/__tests__/client.test.ts:31

    process.env.NEXT_PUBLIC_I18N_DEBUG_BROWSER = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #bf6872ad73a2f552 — Environment-variable access.

repo/packages/env/src/__tests__/client.test.ts:32

    process.env.NEXT_PUBLIC_I18N_DEBUG_SERVER = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #25023301f40ffb55 — Environment-variable access.

repo/packages/env/src/__tests__/sandbox.test.ts:7

    delete process.env.SANDBOX_PROVIDER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e70b61849d4bd2cf — Environment-variable access.

repo/packages/env/src/__tests__/sandbox.test.ts:8

    delete process.env.ONLYBOXES_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #69794776407e059e — Environment-variable access.

repo/packages/env/src/__tests__/sandbox.test.ts:9

    delete process.env.ONLYBOXES_JIT_ISSUER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9d74d650dfb0e20e — Environment-variable access.

repo/packages/env/src/__tests__/sandbox.test.ts:10

    delete process.env.ONLYBOXES_JIT_SIGNING_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #16b74e9062e371f8 — Environment-variable access.

repo/packages/env/src/__tests__/sandbox.test.ts:11

    delete process.env.ONLYBOXES_JIT_TTL_SEC;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #bc18297e544a7be0 — Environment-variable access.

repo/packages/env/src/__tests__/sandbox.test.ts:12

    delete process.env.ONLYBOXES_LEASE_TTL_SEC;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #1ec96f7dc6d70d6d — Environment-variable access.

repo/packages/env/src/__tests__/sandbox.test.ts:16

    process.env.SANDBOX_PROVIDER = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #57be5ff9b4ee9fbd — Environment-variable access.

repo/packages/env/src/__tests__/sandbox.test.ts:17

    process.env.ONLYBOXES_BASE_URL = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #7149bf42cc03ac50 — Environment-variable access.

repo/packages/env/src/__tests__/sandbox.test.ts:18

    process.env.ONLYBOXES_JIT_ISSUER = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ae3b66f1efb3c6ee — Environment-variable access.

repo/packages/env/src/__tests__/sandbox.test.ts:19

    process.env.ONLYBOXES_JIT_SIGNING_KEY = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #98673de292d2a5e7 — Environment-variable access.

repo/packages/env/src/__tests__/sandbox.test.ts:20

    process.env.ONLYBOXES_JIT_TTL_SEC = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f0e647fde2890568 — Environment-variable access.

repo/packages/env/src/__tests__/sandbox.test.ts:21

    process.env.ONLYBOXES_LEASE_TTL_SEC = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9dea440172619a57 — Environment-variable access.

repo/packages/env/src/__tests__/sandbox.test.ts:35

    process.env.SANDBOX_PROVIDER = 'onlyboxes';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #aa87a7c49cf5551b — Environment-variable access.

repo/packages/env/src/__tests__/sandbox.test.ts:36

    process.env.ONLYBOXES_BASE_URL = 'https://onlyboxes.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #7c7946920b7b7059 — Environment-variable access.

repo/packages/env/src/__tests__/sandbox.test.ts:37

    process.env.ONLYBOXES_JIT_ISSUER = 'lobehub-test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #02550fe70bbcd3b1 — Environment-variable access.

repo/packages/env/src/__tests__/sandbox.test.ts:38

    process.env.ONLYBOXES_JIT_SIGNING_KEY = 'jit-signing-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #fd23f62ff1725c02 — Environment-variable access.

repo/packages/env/src/__tests__/sandbox.test.ts:39

    process.env.ONLYBOXES_JIT_TTL_SEC = '900';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #948f2ddf9f12ece2 — Environment-variable access.

repo/packages/env/src/__tests__/sandbox.test.ts:40

    process.env.ONLYBOXES_LEASE_TTL_SEC = '3600';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #75fa44e7fd1315c6 — Environment-variable access.

repo/packages/env/src/analytics.ts:39

      ENABLED_PLAUSIBLE_ANALYTICS: !!process.env.PLAUSIBLE_DOMAIN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7dec46e69a031749 — Environment-variable access.

repo/packages/env/src/analytics.ts:40

      PLAUSIBLE_DOMAIN: process.env.PLAUSIBLE_DOMAIN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #91bb465ca4deb318 — Environment-variable access.

repo/packages/env/src/analytics.ts:41

      PLAUSIBLE_SCRIPT_BASE_URL: process.env.PLAUSIBLE_SCRIPT_BASE_URL || 'https://plausible.io',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c10abcd8280cd1f5 — Environment-variable access.

repo/packages/env/src/analytics.ts:44

      ENABLED_POSTHOG_ANALYTICS: !!process.env.POSTHOG_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2bf6feb399babb9b — Environment-variable access.

repo/packages/env/src/analytics.ts:45

      POSTHOG_KEY: process.env.POSTHOG_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b57f9ae8afd08916 — Environment-variable access.

repo/packages/env/src/analytics.ts:46

      POSTHOG_HOST: process.env.POSTHOG_HOST || 'https://app.posthog.com',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #79a377504f9027df — Environment-variable access.

repo/packages/env/src/analytics.ts:47

      DEBUG_POSTHOG_ANALYTICS: process.env.DEBUG_POSTHOG_ANALYTICS === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #855a34ddf8775445 — Environment-variable access.

repo/packages/env/src/analytics.ts:50

      ENABLED_UMAMI_ANALYTICS: !!process.env.UMAMI_WEBSITE_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9c9ddf656f8c0d7c — Environment-variable access.

repo/packages/env/src/analytics.ts:51

      UMAMI_SCRIPT_URL: process.env.UMAMI_SCRIPT_URL || 'https://analytics.umami.is/script.js',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fb7c2cdc9dbe641e — Environment-variable access.

repo/packages/env/src/analytics.ts:52

      UMAMI_WEBSITE_ID: process.env.UMAMI_WEBSITE_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7f771e491e8d4e30 — Environment-variable access.

repo/packages/env/src/analytics.ts:55

      ENABLED_CLARITY_ANALYTICS: !!process.env.CLARITY_PROJECT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f1394374babe986e — Environment-variable access.

repo/packages/env/src/analytics.ts:56

      CLARITY_PROJECT_ID: process.env.CLARITY_PROJECT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7089e1a4f0b00831 — Environment-variable access.

repo/packages/env/src/analytics.ts:59

      ENABLE_VERCEL_ANALYTICS: process.env.ENABLE_VERCEL_ANALYTICS === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #02a2e8f766d401ca — Environment-variable access.

repo/packages/env/src/analytics.ts:60

      DEBUG_VERCEL_ANALYTICS: process.env.DEBUG_VERCEL_ANALYTICS === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dc91f8d99d1b41c1 — Environment-variable access.

repo/packages/env/src/analytics.ts:63

      ENABLE_GOOGLE_ANALYTICS: !!process.env.GOOGLE_ANALYTICS_MEASUREMENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #33b18cce64b7748e — Environment-variable access.

repo/packages/env/src/analytics.ts:64

      GOOGLE_ANALYTICS_MEASUREMENT_ID: process.env.GOOGLE_ANALYTICS_MEASUREMENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f1b557646b62577e — Environment-variable access.

repo/packages/env/src/analytics.ts:67

      ENABLED_X_ADS: !!process.env.X_ADS_PIXEL_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #28fcde38bf93ab7b — Environment-variable access.

repo/packages/env/src/analytics.ts:68

      X_ADS_PIXEL_ID: process.env.X_ADS_PIXEL_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #55fe290c772a7a6b — Environment-variable access.

repo/packages/env/src/analytics.ts:69

      X_ADS_LOGIN_OR_SIGNUP_CLICKED_EVENT_ID: process.env.X_ADS_LOGIN_OR_SIGNUP_CLICKED_EVENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b8070bf2cd3545b0 — Environment-variable access.

repo/packages/env/src/analytics.ts:70

      X_ADS_MAIN_PAGE_VIEW_EVENT_ID: process.env.X_ADS_MAIN_PAGE_VIEW_EVENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ca8c0f92e55eff20 — Environment-variable access.

repo/packages/env/src/analytics.ts:71

      X_ADS_PURCHASE_EVENT_ID: process.env.X_ADS_PURCHASE_EVENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ff3fc73b87e816de — Environment-variable access.

repo/packages/env/src/analytics.ts:75

      REACT_SCAN_MONITOR_API_KEY: process.env.REACT_SCAN_MONITOR_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2b245b998e9c2921 — Environment-variable access.

repo/packages/env/src/app.ts:4

const isInVercel = process.env.VERCEL === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f70f8bdf6e15b4c4 — Environment-variable access.

repo/packages/env/src/app.ts:11

  if (process.env.VERCEL_ENV === 'production' && process.env.VERCEL_PROJECT_PRODUCTION_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #90e44ef8d1aad99e — Environment-variable access.

repo/packages/env/src/app.ts:12

    return `https://${process.env.VERCEL_PROJECT_PRODUCTION_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9c7e5da480da68ba — Environment-variable access.

repo/packages/env/src/app.ts:14

  if (process.env.VERCEL_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #73f701f38072327e — Environment-variable access.

repo/packages/env/src/app.ts:15

    return `https://${process.env.VERCEL_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ac4714024b3f56bf — Environment-variable access.

repo/packages/env/src/app.ts:17

  return `https://${process.env.VERCEL_BRANCH_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b4421f4d5edfe6cd — Environment-variable access.

repo/packages/env/src/app.ts:20

const APP_URL = process.env.APP_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f6b4f9d71eeee619 — Environment-variable access.

repo/packages/env/src/app.ts:21

  ? process.env.APP_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #454d29a49fbec95c — Environment-variable access.

repo/packages/env/src/app.ts:24

    : process.env.NODE_ENV === 'development'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #739c95583f9386f5 — Environment-variable access.

repo/packages/env/src/app.ts:25

      ? `http://localhost:${process.env.PORT || 3010}`

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7fd75d68fcf7e5b2 — Environment-variable access.

repo/packages/env/src/app.ts:26

      : `http://localhost:${process.env.PORT || 3210}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d20539dcb755e3fa — Environment-variable access.

repo/packages/env/src/app.ts:30

const INTERNAL_APP_URL = process.env.INTERNAL_APP_URL || APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #052e3ef19ff996d9 — Environment-variable access.

repo/packages/env/src/app.ts:92

      NEXT_PUBLIC_ENABLE_SENTRY: !!process.env.NEXT_PUBLIC_SENTRY_DSN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #debba2733328f2a9 — Environment-variable access.

repo/packages/env/src/app.ts:94

      AGENTS_INDEX_URL: !!process.env.AGENTS_INDEX_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2e9b78c791a1cf02 — Environment-variable access.

repo/packages/env/src/app.ts:95

        ? process.env.AGENTS_INDEX_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0df9f54e085ceb0f — Environment-variable access.

repo/packages/env/src/app.ts:98

      DEFAULT_AGENT_CONFIG: process.env.DEFAULT_AGENT_CONFIG || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #de81fac3f7eef267 — Environment-variable access.

repo/packages/env/src/app.ts:99

      SYSTEM_AGENT: process.env.SYSTEM_AGENT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ddfaf43469f731af — Environment-variable access.

repo/packages/env/src/app.ts:101

      PLUGINS_INDEX_URL: !!process.env.PLUGINS_INDEX_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1a0b61a70a21564d — Environment-variable access.

repo/packages/env/src/app.ts:102

        ? process.env.PLUGINS_INDEX_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6c7476c23883ded8 — Environment-variable access.

repo/packages/env/src/app.ts:105

      PLUGIN_SETTINGS: process.env.PLUGIN_SETTINGS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f21e984cc0b370cc — Environment-variable access.

repo/packages/env/src/app.ts:107

      VERCEL_EDGE_CONFIG: process.env.VERCEL_EDGE_CONFIG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aba99b5310e31aa2 — Environment-variable access.

repo/packages/env/src/app.ts:111

      MIDDLEWARE_REWRITE_THROUGH_LOCAL: process.env.MIDDLEWARE_REWRITE_THROUGH_LOCAL === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #030acfbfbaf3c800 — Environment-variable access.

repo/packages/env/src/app.ts:113

      CUSTOM_FONT_FAMILY: process.env.CUSTOM_FONT_FAMILY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cda212bb3093c10a — Environment-variable access.

repo/packages/env/src/app.ts:114

      CUSTOM_FONT_URL: process.env.CUSTOM_FONT_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f307d489ee48a8e0 — Environment-variable access.

repo/packages/env/src/app.ts:115

      CDN_USE_GLOBAL: process.env.CDN_USE_GLOBAL === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d8e5d5d24d0650ce — Environment-variable access.

repo/packages/env/src/app.ts:117

      SSRF_ALLOW_PRIVATE_IP_ADDRESS: process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #745c622403f53d9d — Environment-variable access.

repo/packages/env/src/app.ts:118

      SSRF_ALLOW_IP_ADDRESS_LIST: process.env.SSRF_ALLOW_IP_ADDRESS_LIST,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #08c4c67613e9d063 — Environment-variable access.

repo/packages/env/src/app.ts:119

      MARKET_BASE_URL: process.env.MARKET_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fa896ed3537a6fab — Environment-variable access.

repo/packages/env/src/app.ts:121

      MARKET_TRUSTED_CLIENT_SECRET: process.env.MARKET_TRUSTED_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2a725ecd09ddabef — Environment-variable access.

repo/packages/env/src/app.ts:122

      MARKET_TRUSTED_CLIENT_ID: process.env.MARKET_TRUSTED_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c2c7d11fe7500f22 — Environment-variable access.

repo/packages/env/src/app.ts:124

      AGENT_GATEWAY_SERVICE_TOKEN: process.env.AGENT_GATEWAY_SERVICE_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6542362546341a10 — Environment-variable access.

repo/packages/env/src/app.ts:125

      ENABLE_AGENT_GATEWAY: process.env.ENABLE_AGENT_GATEWAY === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a6fa61d54841ab87 — Environment-variable access.

repo/packages/env/src/app.ts:126

      AGENT_GATEWAY_URL: process.env.AGENT_GATEWAY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #22aa78bd36a76ff1 — Environment-variable access.

repo/packages/env/src/app.ts:127

      enableQueueAgentRuntime: process.env.AGENT_RUNTIME_MODE === 'queue',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #73ae7b8abf6df5de — Environment-variable access.

repo/packages/env/src/app.ts:128

      TELEMETRY_DISABLED: process.env.TELEMETRY_DISABLED === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5f6e362e5e7c60db — Environment-variable access.

repo/packages/env/src/auth.ts:202

      AUTH_EMAIL_VERIFICATION: process.env.AUTH_EMAIL_VERIFICATION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c49460633b54cb94 — Environment-variable access.

repo/packages/env/src/auth.ts:203

      AUTH_ENABLE_MAGIC_LINK: process.env.AUTH_ENABLE_MAGIC_LINK === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b4e5c76fb57eafa7 — Environment-variable access.

repo/packages/env/src/auth.ts:204

      AUTH_SECRET: process.env.AUTH_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #518bf921e138d3f5 — Environment-variable access.

repo/packages/env/src/auth.ts:205

      AUTH_SSO_PROVIDERS: process.env.AUTH_SSO_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a4ef7667d92d76a5 — Environment-variable access.

repo/packages/env/src/auth.ts:206

      AUTH_TRUSTED_ORIGINS: process.env.AUTH_TRUSTED_ORIGINS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f131e8ec2a491fc5 — Environment-variable access.

repo/packages/env/src/auth.ts:207

      AUTH_ALLOWED_EMAILS: process.env.AUTH_ALLOWED_EMAILS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cabd821c903d3b6f — Environment-variable access.

repo/packages/env/src/auth.ts:208

      AUTH_DISABLE_EMAIL_PASSWORD: process.env.AUTH_DISABLE_EMAIL_PASSWORD === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1372bbee9a1ec65b — Environment-variable access.

repo/packages/env/src/auth.ts:211

      AUTH_COGNITO_DOMAIN: process.env.AUTH_COGNITO_DOMAIN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b43ff2d6493946d6 — Environment-variable access.

repo/packages/env/src/auth.ts:212

      AUTH_COGNITO_REGION: process.env.AUTH_COGNITO_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #16ad704c6328ddc2 — Environment-variable access.

repo/packages/env/src/auth.ts:213

      AUTH_COGNITO_USERPOOL_ID: process.env.AUTH_COGNITO_USERPOOL_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aee2c5d8b015d2ad — Environment-variable access.

repo/packages/env/src/auth.ts:216

      AUTH_GOOGLE_ID: process.env.AUTH_GOOGLE_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b8a3e35e14631ed1 — Environment-variable access.

repo/packages/env/src/auth.ts:217

      AUTH_GOOGLE_SECRET: process.env.AUTH_GOOGLE_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3b6f0ac8f88706a8 — Environment-variable access.

repo/packages/env/src/auth.ts:219

      AUTH_APPLE_CLIENT_ID: process.env.AUTH_APPLE_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #434b1ef33cd327f4 — Environment-variable access.

repo/packages/env/src/auth.ts:220

      AUTH_APPLE_CLIENT_SECRET: process.env.AUTH_APPLE_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1a9fb2250c2c68c6 — Environment-variable access.

repo/packages/env/src/auth.ts:221

      AUTH_APPLE_APP_BUNDLE_IDENTIFIER: process.env.AUTH_APPLE_APP_BUNDLE_IDENTIFIER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9ed2dc15119a568d — Environment-variable access.

repo/packages/env/src/auth.ts:223

      AUTH_GITHUB_ID: process.env.AUTH_GITHUB_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #db48793b0c4b11b7 — Environment-variable access.

repo/packages/env/src/auth.ts:224

      AUTH_GITHUB_SECRET: process.env.AUTH_GITHUB_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #935654e70523e39c — Environment-variable access.

repo/packages/env/src/auth.ts:226

      AUTH_MICROSOFT_AUTHORITY_URL: process.env.AUTH_MICROSOFT_AUTHORITY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #972698afd52c375b — Environment-variable access.

repo/packages/env/src/auth.ts:227

      AUTH_MICROSOFT_ID: process.env.AUTH_MICROSOFT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3cf77b7337a96432 — Environment-variable access.

repo/packages/env/src/auth.ts:228

      AUTH_MICROSOFT_SECRET: process.env.AUTH_MICROSOFT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #139a8dbe7145ae4c — Environment-variable access.

repo/packages/env/src/auth.ts:229

      AUTH_MICROSOFT_TENANT_ID: process.env.AUTH_MICROSOFT_TENANT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d630b8a3cfef2ba8 — Environment-variable access.

repo/packages/env/src/auth.ts:231

      AUTH_COGNITO_ID: process.env.AUTH_COGNITO_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a85b42adf1514141 — Environment-variable access.

repo/packages/env/src/auth.ts:232

      AUTH_COGNITO_SECRET: process.env.AUTH_COGNITO_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cfdea4068a373bf6 — Environment-variable access.

repo/packages/env/src/auth.ts:233

      AUTH_COGNITO_ISSUER: process.env.AUTH_COGNITO_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a8cf3775bdc22901 — Environment-variable access.

repo/packages/env/src/auth.ts:235

      AUTH_AUTH0_ID: process.env.AUTH_AUTH0_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9199a4d79ac6815b — Environment-variable access.

repo/packages/env/src/auth.ts:236

      AUTH_AUTH0_SECRET: process.env.AUTH_AUTH0_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b795c12b1b52ac44 — Environment-variable access.

repo/packages/env/src/auth.ts:237

      AUTH_AUTH0_ISSUER: process.env.AUTH_AUTH0_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f70a32d72cc55c3a — Environment-variable access.

repo/packages/env/src/auth.ts:239

      AUTH_AUTHELIA_ID: process.env.AUTH_AUTHELIA_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9c2295d46c099aaf — Environment-variable access.

repo/packages/env/src/auth.ts:240

      AUTH_AUTHELIA_SECRET: process.env.AUTH_AUTHELIA_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #83b0bca6f0eb7f2e — Environment-variable access.

repo/packages/env/src/auth.ts:241

      AUTH_AUTHELIA_ISSUER: process.env.AUTH_AUTHELIA_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #adcc2003378958bb — Environment-variable access.

repo/packages/env/src/auth.ts:243

      AUTH_AUTHENTIK_ID: process.env.AUTH_AUTHENTIK_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d252981339ffdec5 — Environment-variable access.

repo/packages/env/src/auth.ts:244

      AUTH_AUTHENTIK_SECRET: process.env.AUTH_AUTHENTIK_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d73b143cfe1081dd — Environment-variable access.

repo/packages/env/src/auth.ts:245

      AUTH_AUTHENTIK_ISSUER: process.env.AUTH_AUTHENTIK_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #960a314d1353bfeb — Environment-variable access.

repo/packages/env/src/auth.ts:247

      AUTH_CASDOOR_ID: process.env.AUTH_CASDOOR_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a29e22ffaec2ba61 — Environment-variable access.

repo/packages/env/src/auth.ts:248

      AUTH_CASDOOR_SECRET: process.env.AUTH_CASDOOR_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8f42e606600fe8b2 — Environment-variable access.

repo/packages/env/src/auth.ts:249

      AUTH_CASDOOR_ISSUER: process.env.AUTH_CASDOOR_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8991bcc62ef79bc7 — Environment-variable access.

repo/packages/env/src/auth.ts:251

      AUTH_CLOUDFLARE_ZERO_TRUST_ID: process.env.AUTH_CLOUDFLARE_ZERO_TRUST_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c5f93efba9387466 — Environment-variable access.

repo/packages/env/src/auth.ts:252

      AUTH_CLOUDFLARE_ZERO_TRUST_SECRET: process.env.AUTH_CLOUDFLARE_ZERO_TRUST_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #02692bd86418a35f — Environment-variable access.

repo/packages/env/src/auth.ts:253

      AUTH_CLOUDFLARE_ZERO_TRUST_ISSUER: process.env.AUTH_CLOUDFLARE_ZERO_TRUST_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7ccc01be5daf85d1 — Environment-variable access.

repo/packages/env/src/auth.ts:255

      AUTH_FEISHU_APP_ID: process.env.AUTH_FEISHU_APP_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #86a2aef48c9f3bb1 — Environment-variable access.

repo/packages/env/src/auth.ts:256

      AUTH_FEISHU_APP_SECRET: process.env.AUTH_FEISHU_APP_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9c3b0f1516688455 — Environment-variable access.

repo/packages/env/src/auth.ts:258

      AUTH_GENERIC_OIDC_ID: process.env.AUTH_GENERIC_OIDC_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f16ae8ab2c8e8662 — Environment-variable access.

repo/packages/env/src/auth.ts:259

      AUTH_GENERIC_OIDC_SECRET: process.env.AUTH_GENERIC_OIDC_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dbe6c20c10c9a567 — Environment-variable access.

repo/packages/env/src/auth.ts:260

      AUTH_GENERIC_OIDC_ISSUER: process.env.AUTH_GENERIC_OIDC_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c7cd399208609bfb — Environment-variable access.

repo/packages/env/src/auth.ts:262

      AUTH_KEYCLOAK_ID: process.env.AUTH_KEYCLOAK_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #853d7ef565dfa2c4 — Environment-variable access.

repo/packages/env/src/auth.ts:263

      AUTH_KEYCLOAK_SECRET: process.env.AUTH_KEYCLOAK_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #240a776a0e7de449 — Environment-variable access.

repo/packages/env/src/auth.ts:264

      AUTH_KEYCLOAK_ISSUER: process.env.AUTH_KEYCLOAK_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e4a3405de02328ca — Environment-variable access.

repo/packages/env/src/auth.ts:266

      AUTH_LOGTO_ID: process.env.AUTH_LOGTO_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c0b64e67f23e03a1 — Environment-variable access.

repo/packages/env/src/auth.ts:267

      AUTH_LOGTO_SECRET: process.env.AUTH_LOGTO_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #60714e01ac13b398 — Environment-variable access.

repo/packages/env/src/auth.ts:268

      AUTH_LOGTO_ISSUER: process.env.AUTH_LOGTO_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cc791cbd7df1ff14 — Environment-variable access.

repo/packages/env/src/auth.ts:270

      AUTH_OKTA_ID: process.env.AUTH_OKTA_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0949922bf9d8893e — Environment-variable access.

repo/packages/env/src/auth.ts:271

      AUTH_OKTA_SECRET: process.env.AUTH_OKTA_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ab8d2240f49746b7 — Environment-variable access.

repo/packages/env/src/auth.ts:272

      AUTH_OKTA_ISSUER: process.env.AUTH_OKTA_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #27fc762cb5e779d1 — Environment-variable access.

repo/packages/env/src/auth.ts:274

      AUTH_WECHAT_ID: process.env.AUTH_WECHAT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6c0aa08f0d32141c — Environment-variable access.

repo/packages/env/src/auth.ts:275

      AUTH_WECHAT_SECRET: process.env.AUTH_WECHAT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #19fcf909c86ea165 — Environment-variable access.

repo/packages/env/src/auth.ts:277

      AUTH_ZITADEL_ID: process.env.AUTH_ZITADEL_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #db00eae647a14316 — Environment-variable access.

repo/packages/env/src/auth.ts:278

      AUTH_ZITADEL_SECRET: process.env.AUTH_ZITADEL_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5cbef3843129c234 — Environment-variable access.

repo/packages/env/src/auth.ts:279

      AUTH_ZITADEL_ISSUER: process.env.AUTH_ZITADEL_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d23720f547c0838c — Environment-variable access.

repo/packages/env/src/auth.ts:282

      LOGTO_WEBHOOK_SIGNING_KEY: process.env.LOGTO_WEBHOOK_SIGNING_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #01d66eb48bbf32f6 — Environment-variable access.

repo/packages/env/src/auth.ts:285

      CASDOOR_WEBHOOK_SECRET: process.env.CASDOOR_WEBHOOK_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cb05dbd48aeead9a — Environment-variable access.

repo/packages/env/src/auth.ts:287

      JWKS_KEY: process.env.JWKS_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fe587415f157d338 — Environment-variable access.

repo/packages/env/src/auth.ts:288

      ENABLE_OIDC: !!process.env.JWKS_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1dded269694eb6d2 — Environment-variable access.

repo/packages/env/src/auth.ts:291

      INTERNAL_JWT_EXPIRATION: process.env.INTERNAL_JWT_EXPIRATION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ff5fad4b50f48431 — Environment-variable access.

repo/packages/env/src/debug.ts:16

  DEBUG_MODE: process.env.NEXT_PUBLIC_DEVELOPER_DEBUG === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ef0beb4cb8bc7463 — Environment-variable access.

repo/packages/env/src/debug.ts:19

  I18N_DEBUG: process.env.NEXT_PUBLIC_I18N_DEBUG === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a005c7d61a98e99d — Environment-variable access.

repo/packages/env/src/debug.ts:20

  I18N_DEBUG_BROWSER: process.env.NEXT_PUBLIC_I18N_DEBUG_BROWSER === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9c65eb92a4f23d5f — Environment-variable access.

repo/packages/env/src/debug.ts:21

  I18N_DEBUG_SERVER: process.env.NEXT_PUBLIC_I18N_DEBUG_SERVER === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #96023b662304dc50 — Environment-variable access.

repo/packages/env/src/email.ts:35

      SMTP_FROM: process.env.SMTP_FROM,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #931354a8b104736a — Environment-variable access.

repo/packages/env/src/email.ts:36

      SMTP_HOST: process.env.SMTP_HOST,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ec9d99ad9d157ea3 — Environment-variable access.

repo/packages/env/src/email.ts:37

      SMTP_PORT: process.env.SMTP_PORT ? Number(process.env.SMTP_PORT) : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #88c2d3427c594ed2 — Environment-variable access.

repo/packages/env/src/email.ts:38

      SMTP_SECURE: process.env.SMTP_SECURE === 'true',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e04044cd1b14c6a9 — Environment-variable access.

repo/packages/env/src/email.ts:39

      SMTP_USER: process.env.SMTP_USER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8ed0b1cba39daef8 — Environment-variable access.

repo/packages/env/src/email.ts:40

      SMTP_PASS: process.env.SMTP_PASS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8f7f6df4ea85a079 — Environment-variable access.

repo/packages/env/src/email.ts:41

      EMAIL_SERVICE_PROVIDER: process.env.EMAIL_SERVICE_PROVIDER

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d55cc7bde6b55aed — Environment-variable access.

repo/packages/env/src/email.ts:42

        ? process.env.EMAIL_SERVICE_PROVIDER.toLowerCase()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #72b3aa9e49cca784 — Environment-variable access.

repo/packages/env/src/email.ts:44

      RESEND_API_KEY: process.env.RESEND_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0cdf64033c7b7712 — Environment-variable access.

repo/packages/env/src/email.ts:45

      RESEND_FROM: process.env.RESEND_FROM,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #742d2af40ec75805 — Environment-variable access.

repo/packages/env/src/file.ts:7

  if (!!process.env.NEXT_PUBLIC_S3_DOMAIN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #99d39369ea32b127 — Environment-variable access.

repo/packages/env/src/file.ts:13

  const S3_PUBLIC_DOMAIN = process.env.S3_PUBLIC_DOMAIN || process.env.NEXT_PUBLIC_S3_DOMAIN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #731fc6c3b1e59bff — Environment-variable access.

repo/packages/env/src/file.ts:25

      CHUNKS_AUTO_EMBEDDING: process.env.CHUNKS_AUTO_EMBEDDING !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d45774313e6991c6 — Environment-variable access.

repo/packages/env/src/file.ts:26

      CHUNKS_AUTO_GEN_METADATA: process.env.CHUNKS_AUTO_GEN_METADATA !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #929e094a3c8d425d — Environment-variable access.

repo/packages/env/src/file.ts:27

      EMBEDDING_BATCH_SIZE: process.env.EMBEDDING_BATCH_SIZE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d8325524822f4ac0 — Environment-variable access.

repo/packages/env/src/file.ts:28

      EMBEDDING_CONCURRENCY: process.env.EMBEDDING_CONCURRENCY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8fbb458264a98a6e — Environment-variable access.

repo/packages/env/src/file.ts:30

      NEXT_PUBLIC_S3_DOMAIN: process.env.NEXT_PUBLIC_S3_DOMAIN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3d3511328eb56a31 — Environment-variable access.

repo/packages/env/src/file.ts:31

      NEXT_PUBLIC_S3_FILE_PATH: process.env.NEXT_PUBLIC_S3_FILE_PATH || DEFAULT_S3_FILE_PATH,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #265fb8fd211e9dc1 — Environment-variable access.

repo/packages/env/src/file.ts:33

      S3_ACCESS_KEY_ID: process.env.S3_ACCESS_KEY_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #545f87d79d0db7cb — Environment-variable access.

repo/packages/env/src/file.ts:34

      S3_BUCKET: process.env.S3_BUCKET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #06d61ff2fecdff38 — Environment-variable access.

repo/packages/env/src/file.ts:35

      S3_ENABLE_PATH_STYLE: process.env.S3_ENABLE_PATH_STYLE === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7a1dbf09004e08d2 — Environment-variable access.

repo/packages/env/src/file.ts:36

      S3_ENDPOINT: process.env.S3_ENDPOINT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #92f059b68952b75d — Environment-variable access.

repo/packages/env/src/file.ts:37

      S3_PREVIEW_URL_EXPIRE_IN: parseInt(process.env.S3_PREVIEW_URL_EXPIRE_IN || '7200'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #14338ccd00a297d5 — Environment-variable access.

repo/packages/env/src/file.ts:39

      S3_REGION: process.env.S3_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e0f2ae99348ae658 — Environment-variable access.

repo/packages/env/src/file.ts:40

      S3_SECRET_ACCESS_KEY: process.env.S3_SECRET_ACCESS_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #63d028d56b69e78f — Environment-variable access.

repo/packages/env/src/file.ts:41

      S3_SET_ACL: process.env.S3_SET_ACL === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0772b5ed2456deb5 — Environment-variable access.

repo/packages/env/src/gateway.ts:7

      DEVICE_GATEWAY_SERVICE_TOKEN: process.env.DEVICE_GATEWAY_SERVICE_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1ba07f510f97067d — Environment-variable access.

repo/packages/env/src/gateway.ts:8

      DEVICE_GATEWAY_URL: process.env.DEVICE_GATEWAY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3625b3cf24cf1fe1 — Environment-variable access.

repo/packages/env/src/gateway.ts:9

      MESSAGE_GATEWAY_ENABLED: process.env.MESSAGE_GATEWAY_ENABLED,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e57293f4067a1640 — Environment-variable access.

repo/packages/env/src/gateway.ts:10

      MESSAGE_GATEWAY_SERVICE_TOKEN: process.env.MESSAGE_GATEWAY_SERVICE_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3c04b10a05583f9e — Environment-variable access.

repo/packages/env/src/gateway.ts:11

      MESSAGE_GATEWAY_URL: process.env.MESSAGE_GATEWAY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #07a9e0b47f0f1524 — Environment-variable access.

repo/packages/env/src/image.ts:9

      AI_IMAGE_DEFAULT_IMAGE_NUM: process.env.AI_IMAGE_DEFAULT_IMAGE_NUM,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a8d6aa2b9510583f — Environment-variable access.

repo/packages/env/src/knowledge.ts:6

    DEFAULT_FILES_CONFIG: process.env.DEFAULT_FILES_CONFIG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a15c801c834cc115 — Environment-variable access.

repo/packages/env/src/knowledge.ts:7

    FILE_TYPE_CHUNKING_RULES: process.env.FILE_TYPE_CHUNKING_RULES,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #76661299ab4f7ffe — Environment-variable access.

repo/packages/env/src/knowledge.ts:8

    UNSTRUCTURED_API_KEY: process.env.UNSTRUCTURED_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5597358b762d3058 — Environment-variable access.

repo/packages/env/src/knowledge.ts:9

    UNSTRUCTURED_SERVER_URL: process.env.UNSTRUCTURED_SERVER_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f445d92457038884 — Environment-variable access.

repo/packages/env/src/langfuse.ts:7

      ENABLE_LANGFUSE: process.env.ENABLE_LANGFUSE === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f729a30a2739b2e7 — Environment-variable access.

repo/packages/env/src/langfuse.ts:8

      LANGFUSE_SECRET_KEY: process.env.LANGFUSE_SECRET_KEY || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5961695dd42fc814 — Environment-variable access.

repo/packages/env/src/langfuse.ts:9

      LANGFUSE_PUBLIC_KEY: process.env.LANGFUSE_PUBLIC_KEY || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e78e071f9fb3aa7d — Environment-variable access.

repo/packages/env/src/langfuse.ts:10

      LANGFUSE_HOST: process.env.LANGFUSE_HOST || 'https://cloud.langfuse.com',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4ac28b49e70b6bd5 — Environment-variable access.

repo/packages/env/src/llm.ts:260

      API_KEY_SELECT_MODE: process.env.API_KEY_SELECT_MODE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #81194a6d869b5a52 — Environment-variable access.

repo/packages/env/src/llm.ts:262

      ENABLED_OPENAI: process.env.ENABLED_OPENAI !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cbee483f3de976ab — Environment-variable access.

repo/packages/env/src/llm.ts:263

      OPENAI_API_KEY: process.env.OPENAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b9fe27e5205fe644 — Environment-variable access.

repo/packages/env/src/llm.ts:265

      ENABLED_AZURE_OPENAI: !!process.env.AZURE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #38be7575614de1d6 — Environment-variable access.

repo/packages/env/src/llm.ts:266

      AZURE_API_KEY: process.env.AZURE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #493cc63788815976 — Environment-variable access.

repo/packages/env/src/llm.ts:267

      AZURE_API_VERSION: process.env.AZURE_API_VERSION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #57097b78b8d3e593 — Environment-variable access.

repo/packages/env/src/llm.ts:268

      AZURE_ENDPOINT: process.env.AZURE_ENDPOINT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #70ef82e55a65072f — Environment-variable access.

repo/packages/env/src/llm.ts:270

      ENABLED_AZUREAI: !!process.env.AZUREAI_ENDPOINT_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #556f20f455963d08 — Environment-variable access.

repo/packages/env/src/llm.ts:271

      AZUREAI_ENDPOINT_KEY: process.env.AZUREAI_ENDPOINT_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5367e46234584ffd — Environment-variable access.

repo/packages/env/src/llm.ts:272

      AZUREAI_ENDPOINT: process.env.AZUREAI_ENDPOINT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #04a5b0b65ae6ce45 — Environment-variable access.

repo/packages/env/src/llm.ts:274

      ENABLED_ZHIPU: !!process.env.ZHIPU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #61a2a83bacac86bd — Environment-variable access.

repo/packages/env/src/llm.ts:275

      ZHIPU_API_KEY: process.env.ZHIPU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #40458b2a1c2127cb — Environment-variable access.

repo/packages/env/src/llm.ts:277

      ENABLED_DEEPSEEK: !!process.env.DEEPSEEK_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #77db29560fec2df2 — Environment-variable access.

repo/packages/env/src/llm.ts:278

      DEEPSEEK_API_KEY: process.env.DEEPSEEK_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2e2267d3eba72b26 — Environment-variable access.

repo/packages/env/src/llm.ts:280

      ENABLED_GOOGLE: process.env.ENABLED_GOOGLE !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6957848e24ec2521 — Environment-variable access.

repo/packages/env/src/llm.ts:281

      GOOGLE_API_KEY: process.env.GOOGLE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fe5652518d83a11a — Environment-variable access.

repo/packages/env/src/llm.ts:283

      ENABLED_VERTEXAI: !!process.env.VERTEXAI_CREDENTIALS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #27592b03dc6c08fc — Environment-variable access.

repo/packages/env/src/llm.ts:285

      ENABLED_VOLCENGINE: !!process.env.VOLCENGINE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3acf55cb82c1575f — Environment-variable access.

repo/packages/env/src/llm.ts:286

      VOLCENGINE_API_KEY: process.env.VOLCENGINE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9ba62a97e0b083a6 — Environment-variable access.

repo/packages/env/src/llm.ts:288

      ENABLED_PERPLEXITY: !!process.env.PERPLEXITY_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c0f391a465f59a60 — Environment-variable access.

repo/packages/env/src/llm.ts:289

      PERPLEXITY_API_KEY: process.env.PERPLEXITY_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6dea09491ae79aeb — Environment-variable access.

repo/packages/env/src/llm.ts:291

      ENABLED_ANTHROPIC: process.env.ENABLED_ANTHROPIC !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8e7c7fbd45f85d8f — Environment-variable access.

repo/packages/env/src/llm.ts:292

      ANTHROPIC_API_KEY: process.env.ANTHROPIC_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5ed23afddced8596 — Environment-variable access.

repo/packages/env/src/llm.ts:294

      ENABLED_MINIMAX: !!process.env.MINIMAX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4d13d844f92f965e — Environment-variable access.

repo/packages/env/src/llm.ts:295

      MINIMAX_API_KEY: process.env.MINIMAX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7b43d7a12db5250c — Environment-variable access.

repo/packages/env/src/llm.ts:297

      ENABLED_MISTRAL: !!process.env.MISTRAL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #81c021307cdf142b — Environment-variable access.

repo/packages/env/src/llm.ts:298

      MISTRAL_API_KEY: process.env.MISTRAL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2532fb656995dd87 — Environment-variable access.

repo/packages/env/src/llm.ts:300

      ENABLED_OPENROUTER: !!process.env.OPENROUTER_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #898fde36e82c6196 — Environment-variable access.

repo/packages/env/src/llm.ts:301

      OPENROUTER_API_KEY: process.env.OPENROUTER_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b938a61615539afe — Environment-variable access.

repo/packages/env/src/llm.ts:303

      ENABLED_TOGETHERAI: !!process.env.TOGETHERAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #29d60de3ffebb515 — Environment-variable access.

repo/packages/env/src/llm.ts:304

      TOGETHERAI_API_KEY: process.env.TOGETHERAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #df28f0ff6f6758a9 — Environment-variable access.

repo/packages/env/src/llm.ts:306

      ENABLED_FIREWORKSAI: !!process.env.FIREWORKSAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7011640679b17a3f — Environment-variable access.

repo/packages/env/src/llm.ts:307

      FIREWORKSAI_API_KEY: process.env.FIREWORKSAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b746aef695e5449a — Environment-variable access.

repo/packages/env/src/llm.ts:309

      ENABLED_MOONSHOT: !!process.env.MOONSHOT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bd785d1e342dc5e2 — Environment-variable access.

repo/packages/env/src/llm.ts:310

      MOONSHOT_API_KEY: process.env.MOONSHOT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d498e1098b6d7154 — Environment-variable access.

repo/packages/env/src/llm.ts:312

      ENABLED_KIMICODINGPLAN: !!process.env.KIMICODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #489409198a520a53 — Environment-variable access.

repo/packages/env/src/llm.ts:313

      KIMICODINGPLAN_API_KEY: process.env.KIMICODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #caa19e840700b61c — Environment-variable access.

repo/packages/env/src/llm.ts:315

      ENABLED_BAILIANCODINGPLAN: !!process.env.BAILIANCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #03d4f8cfb7487958 — Environment-variable access.

repo/packages/env/src/llm.ts:316

      BAILIANCODINGPLAN_API_KEY: process.env.BAILIANCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9a7e57dd90ff47ca — Environment-variable access.

repo/packages/env/src/llm.ts:318

      ENABLED_GLMCODINGPLAN: !!process.env.GLMCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5bea06ff23655d4a — Environment-variable access.

repo/packages/env/src/llm.ts:319

      GLMCODINGPLAN_API_KEY: process.env.GLMCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4de38fb6bbd5a365 — Environment-variable access.

repo/packages/env/src/llm.ts:321

      ENABLED_MINIMAXCODINGPLAN: !!process.env.MINIMAXCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #221878dd18cde5ad — Environment-variable access.

repo/packages/env/src/llm.ts:322

      MINIMAXCODINGPLAN_API_KEY: process.env.MINIMAXCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aabf948ead358782 — Environment-variable access.

repo/packages/env/src/llm.ts:324

      ENABLED_VOLCENGINECODINGPLAN: !!process.env.VOLCENGINECODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #514fe8be572f10bc — Environment-variable access.

repo/packages/env/src/llm.ts:325

      VOLCENGINECODINGPLAN_API_KEY: process.env.VOLCENGINECODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7e0bef8957dea887 — Environment-variable access.

repo/packages/env/src/llm.ts:327

      ENABLED_GROQ: !!process.env.GROQ_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d33bb1bb7b00ab5d — Environment-variable access.

repo/packages/env/src/llm.ts:328

      GROQ_API_KEY: process.env.GROQ_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5b61c81cf9ae0c84 — Environment-variable access.

repo/packages/env/src/llm.ts:330

      ENABLED_GITHUB: !!process.env.GITHUB_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #87bf126975e2fe0f — Environment-variable access.

repo/packages/env/src/llm.ts:331

      GITHUB_TOKEN: process.env.GITHUB_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2bfdc25a1ee1f3b1 — Environment-variable access.

repo/packages/env/src/llm.ts:333

      ENABLED_ZEROONE: !!process.env.ZEROONE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #abbe853c2cd8664f — Environment-variable access.

repo/packages/env/src/llm.ts:334

      ZEROONE_API_KEY: process.env.ZEROONE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8d0f61972eb4e8db — Environment-variable access.

repo/packages/env/src/llm.ts:336

      ENABLED_AWS_BEDROCK: process.env.ENABLED_AWS_BEDROCK === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6999fdd42fe7cb65 — Environment-variable access.

repo/packages/env/src/llm.ts:337

      AWS_REGION: process.env.AWS_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #95ba2b3ed3eb44bc — Environment-variable access.

repo/packages/env/src/llm.ts:338

      AWS_ACCESS_KEY_ID: process.env.AWS_ACCESS_KEY_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9ef17317c0b95455 — Environment-variable access.

repo/packages/env/src/llm.ts:339

      AWS_SECRET_ACCESS_KEY: process.env.AWS_SECRET_ACCESS_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d2954466f14e8454 — Environment-variable access.

repo/packages/env/src/llm.ts:340

      AWS_SESSION_TOKEN: process.env.AWS_SESSION_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #47e41dec69cbfa3e — Environment-variable access.

repo/packages/env/src/llm.ts:342

      ENABLED_WENXIN: !!process.env.WENXIN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e62b26bc48ddbea4 — Environment-variable access.

repo/packages/env/src/llm.ts:343

      WENXIN_API_KEY: process.env.WENXIN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2f2ee24ae8b368b9 — Environment-variable access.

repo/packages/env/src/llm.ts:345

      ENABLED_OLLAMA: process.env.ENABLED_OLLAMA !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #df9abab8a1b46281 — Environment-variable access.

repo/packages/env/src/llm.ts:346

      ENABLED_OLLAMA_CLOUD: !!process.env.OLLAMA_CLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aca22d1f6de2274f — Environment-variable access.

repo/packages/env/src/llm.ts:347

      OLLAMA_CLOUD_API_KEY: process.env.OLLAMA_CLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4f526986f12a32db — Environment-variable access.

repo/packages/env/src/llm.ts:349

      ENABLED_VLLM: !!process.env.VLLM_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d8833a56d301dfb3 — Environment-variable access.

repo/packages/env/src/llm.ts:350

      VLLM_API_KEY: process.env.VLLM_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b5f5c84b97f7b53f — Environment-variable access.

repo/packages/env/src/llm.ts:352

      ENABLED_XINFERENCE: !!process.env.XINFERENCE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2a349ecd05b7b8d2 — Environment-variable access.

repo/packages/env/src/llm.ts:353

      XINFERENCE_API_KEY: process.env.XINFERENCE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f4a769efabe46e12 — Environment-variable access.

repo/packages/env/src/llm.ts:355

      ENABLED_LMSTUDIO: !!process.env.LMSTUDIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c191e2288082e76b — Environment-variable access.

repo/packages/env/src/llm.ts:356

      LMSTUDIO_API_KEY: process.env.LMSTUDIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #77768a311bbb52d7 — Environment-variable access.

repo/packages/env/src/llm.ts:358

      ENABLED_QINIU: !!process.env.QINIU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #70332ffb3c0e072c — Environment-variable access.

repo/packages/env/src/llm.ts:359

      QINIU_API_KEY: process.env.QINIU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #de9ccd2b626eb26c — Environment-variable access.

repo/packages/env/src/llm.ts:361

      ENABLED_QWEN: !!process.env.QWEN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #015363cae04fcafc — Environment-variable access.

repo/packages/env/src/llm.ts:362

      QWEN_API_KEY: process.env.QWEN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #36613bdc2d060774 — Environment-variable access.

repo/packages/env/src/llm.ts:364

      ENABLED_STEPFUN: !!process.env.STEPFUN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0e85f18d3bdebe44 — Environment-variable access.

repo/packages/env/src/llm.ts:365

      STEPFUN_API_KEY: process.env.STEPFUN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1a70d3031396c833 — Environment-variable access.

repo/packages/env/src/llm.ts:367

      ENABLED_NOVITA: !!process.env.NOVITA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #04142db15bc91c16 — Environment-variable access.

repo/packages/env/src/llm.ts:368

      NOVITA_API_KEY: process.env.NOVITA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1654a824d3d009a0 — Environment-variable access.

repo/packages/env/src/llm.ts:370

      ENABLED_NVIDIA: !!process.env.NVIDIA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #186efaba8412a46f — Environment-variable access.

repo/packages/env/src/llm.ts:371

      NVIDIA_API_KEY: process.env.NVIDIA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d1f5c78cbd7b4c9a — Environment-variable access.

repo/packages/env/src/llm.ts:373

      ENABLED_BAICHUAN: !!process.env.BAICHUAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3c97a9f1ed4b1ecb — Environment-variable access.

repo/packages/env/src/llm.ts:374

      BAICHUAN_API_KEY: process.env.BAICHUAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #daac6bd54dc4bceb — Environment-variable access.

repo/packages/env/src/llm.ts:376

      ENABLED_TAICHU: !!process.env.TAICHU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d4a6c27f76f6ab9e — Environment-variable access.

repo/packages/env/src/llm.ts:377

      TAICHU_API_KEY: process.env.TAICHU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #808a75cd78361d62 — Environment-variable access.

repo/packages/env/src/llm.ts:380

        !!process.env.CLOUDFLARE_API_KEY && !!process.env.CLOUDFLARE_BASE_URL_OR_ACCOUNT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #db0d5a6e2f92e66a — Environment-variable access.

repo/packages/env/src/llm.ts:381

      CLOUDFLARE_API_KEY: process.env.CLOUDFLARE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0595c0989656f224 — Environment-variable access.

repo/packages/env/src/llm.ts:382

      CLOUDFLARE_BASE_URL_OR_ACCOUNT_ID: process.env.CLOUDFLARE_BASE_URL_OR_ACCOUNT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e5fc9dd692c58833 — Environment-variable access.

repo/packages/env/src/llm.ts:384

      ENABLED_AI360: !!process.env.AI360_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #05d1eacf1fe3615f — Environment-variable access.

repo/packages/env/src/llm.ts:385

      AI360_API_KEY: process.env.AI360_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #33e8c5e80de8d600 — Environment-variable access.

repo/packages/env/src/llm.ts:387

      ENABLED_SILICONCLOUD: !!process.env.SILICONCLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d0e80c2f15329403 — Environment-variable access.

repo/packages/env/src/llm.ts:388

      SILICONCLOUD_API_KEY: process.env.SILICONCLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #08f45f40e04b5340 — Environment-variable access.

repo/packages/env/src/llm.ts:390

      ENABLED_GITEE_AI: !!process.env.GITEE_AI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #035798a50cd502ab — Environment-variable access.

repo/packages/env/src/llm.ts:391

      GITEE_AI_API_KEY: process.env.GITEE_AI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #29f975e6afca5230 — Environment-variable access.

repo/packages/env/src/llm.ts:393

      ENABLED_UPSTAGE: !!process.env.UPSTAGE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ceec21d55b659aff — Environment-variable access.

repo/packages/env/src/llm.ts:394

      UPSTAGE_API_KEY: process.env.UPSTAGE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0f549122c3e2158e — Environment-variable access.

repo/packages/env/src/llm.ts:396

      ENABLED_SPARK: !!process.env.SPARK_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #305699d39785f437 — Environment-variable access.

repo/packages/env/src/llm.ts:397

      SPARK_API_KEY: process.env.SPARK_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #748fcb06eaca73fb — Environment-variable access.

repo/packages/env/src/llm.ts:399

      ENABLED_AI21: !!process.env.AI21_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e92ac85588f72ec8 — Environment-variable access.

repo/packages/env/src/llm.ts:400

      AI21_API_KEY: process.env.AI21_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4d49c5d238baacc2 — Environment-variable access.

repo/packages/env/src/llm.ts:402

      ENABLED_HUNYUAN: !!process.env.HUNYUAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6eb18a57c9da9280 — Environment-variable access.

repo/packages/env/src/llm.ts:403

      HUNYUAN_API_KEY: process.env.HUNYUAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #760f8b75cddbcab4 — Environment-variable access.

repo/packages/env/src/llm.ts:405

      ENABLED_HUGGINGFACE: !!process.env.HUGGINGFACE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fb709eeff82a8b3d — Environment-variable access.

repo/packages/env/src/llm.ts:406

      HUGGINGFACE_API_KEY: process.env.HUGGINGFACE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #51733ab05d403a9e — Environment-variable access.

repo/packages/env/src/llm.ts:408

      ENABLED_SENSENOVA: !!process.env.SENSENOVA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #003441388596267d — Environment-variable access.

repo/packages/env/src/llm.ts:409

      SENSENOVA_API_KEY: process.env.SENSENOVA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #843a84deae3a39ea — Environment-variable access.

repo/packages/env/src/llm.ts:411

      ENABLED_XAI: !!process.env.XAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6fd916ca5b17cbdd — Environment-variable access.

repo/packages/env/src/llm.ts:412

      XAI_API_KEY: process.env.XAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #80a78a52520ecd3e — Environment-variable access.

repo/packages/env/src/llm.ts:414

      ENABLED_INTERNLM: !!process.env.INTERNLM_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a34dc998ee40506f — Environment-variable access.

repo/packages/env/src/llm.ts:415

      INTERNLM_API_KEY: process.env.INTERNLM_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d9bc94a325db866f — Environment-variable access.

repo/packages/env/src/llm.ts:417

      ENABLED_HIGRESS: !!process.env.HIGRESS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #94aced515ba484b4 — Environment-variable access.

repo/packages/env/src/llm.ts:418

      HIGRESS_API_KEY: process.env.HIGRESS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bd2d9352ee0c7c7e — Environment-variable access.

repo/packages/env/src/llm.ts:420

      ENABLED_TENCENT_CLOUD: !!process.env.TENCENT_CLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #02ff0b24c9554e47 — Environment-variable access.

repo/packages/env/src/llm.ts:421

      TENCENT_CLOUD_API_KEY: process.env.TENCENT_CLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9252d1e0c3a62b85 — Environment-variable access.

repo/packages/env/src/llm.ts:423

      ENABLED_JINA: !!process.env.JINA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #81c631df29b8f926 — Environment-variable access.

repo/packages/env/src/llm.ts:424

      JINA_API_KEY: process.env.JINA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8b9ad8caf154ff45 — Environment-variable access.

repo/packages/env/src/llm.ts:426

      ENABLED_SAMBANOVA: !!process.env.SAMBANOVA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5487bd7aeef0a588 — Environment-variable access.

repo/packages/env/src/llm.ts:427

      SAMBANOVA_API_KEY: process.env.SAMBANOVA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9875c45d4f183fd7 — Environment-variable access.

repo/packages/env/src/llm.ts:429

      ENABLED_PPIO: !!process.env.PPIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #15c50d3426fb93b2 — Environment-variable access.

repo/packages/env/src/llm.ts:430

      PPIO_API_KEY: process.env.PPIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6048330bb26d63eb — Environment-variable access.

repo/packages/env/src/llm.ts:432

      ENABLED_SEARCH1API: !!process.env.SEARCH1API_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1114b777e45ed921 — Environment-variable access.

repo/packages/env/src/llm.ts:433

      SEARCH1API_API_KEY: process.env.SEARCH1API_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6d4ebb9889db837c — Environment-variable access.

repo/packages/env/src/llm.ts:435

      ENABLED_COHERE: !!process.env.COHERE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #58ae703e62d79c7f — Environment-variable access.

repo/packages/env/src/llm.ts:436

      COHERE_API_KEY: process.env.COHERE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4aca754d1d701856 — Environment-variable access.

repo/packages/env/src/llm.ts:438

      ENABLED_INFINIAI: !!process.env.INFINIAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0258c730659db5e8 — Environment-variable access.

repo/packages/env/src/llm.ts:439

      INFINIAI_API_KEY: process.env.INFINIAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b92e9526c3b9d350 — Environment-variable access.

repo/packages/env/src/llm.ts:441

      ENABLED_FAL: process.env.ENABLED_FAL !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #47a36cac1af31bee — Environment-variable access.

repo/packages/env/src/llm.ts:442

      FAL_API_KEY: process.env.FAL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #439aa631d15d3805 — Environment-variable access.

repo/packages/env/src/llm.ts:444

      ENABLED_BFL: !!process.env.BFL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b6aa0bbf76d25165 — Environment-variable access.

repo/packages/env/src/llm.ts:445

      BFL_API_KEY: process.env.BFL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #45e419cb4986db78 — Environment-variable access.

repo/packages/env/src/llm.ts:447

      ENABLED_COMFYUI: process.env.ENABLED_COMFYUI !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a6be3890b583feda — Environment-variable access.

repo/packages/env/src/llm.ts:448

      COMFYUI_BASE_URL: process.env.COMFYUI_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #198458835e6a5d62 — Environment-variable access.

repo/packages/env/src/llm.ts:449

      COMFYUI_AUTH_TYPE: process.env.COMFYUI_AUTH_TYPE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b4b843d678144e2f — Environment-variable access.

repo/packages/env/src/llm.ts:450

      COMFYUI_API_KEY: process.env.COMFYUI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f792184d3d568492 — Environment-variable access.

repo/packages/env/src/llm.ts:451

      COMFYUI_USERNAME: process.env.COMFYUI_USERNAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b1f153a8998f7631 — Environment-variable access.

repo/packages/env/src/llm.ts:452

      COMFYUI_PASSWORD: process.env.COMFYUI_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2abb2fe7e3b7161e — Environment-variable access.

repo/packages/env/src/llm.ts:453

      COMFYUI_CUSTOM_HEADERS: process.env.COMFYUI_CUSTOM_HEADERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2e0715c0da2a7d6e — Environment-variable access.

repo/packages/env/src/llm.ts:455

      ENABLED_MODELSCOPE: !!process.env.MODELSCOPE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f4c782f92265b1e0 — Environment-variable access.

repo/packages/env/src/llm.ts:456

      MODELSCOPE_API_KEY: process.env.MODELSCOPE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #881bdeaa8b18a89e — Environment-variable access.

repo/packages/env/src/llm.ts:458

      ENABLED_V0: !!process.env.V0_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #10a3659b9e85db90 — Environment-variable access.

repo/packages/env/src/llm.ts:459

      V0_API_KEY: process.env.V0_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #03ce05db305278cc — Environment-variable access.

repo/packages/env/src/llm.ts:461

      ENABLED_VERCELAIGATEWAY: !!process.env.VERCELAIGATEWAY_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9c5e74cf6c8a0280 — Environment-variable access.

repo/packages/env/src/llm.ts:462

      VERCELAIGATEWAY_API_KEY: process.env.VERCELAIGATEWAY_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0cb9d06c7d1cd0eb — Environment-variable access.

repo/packages/env/src/llm.ts:464

      ENABLED_AI302: !!process.env.AI302_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d129d7ea447bcf28 — Environment-variable access.

repo/packages/env/src/llm.ts:465

      AI302_API_KEY: process.env.AI302_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a78d1043e6419d7d — Environment-variable access.

repo/packages/env/src/llm.ts:467

      ENABLED_AKASHCHAT: !!process.env.AKASHCHAT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f129dacb83e0bf9d — Environment-variable access.

repo/packages/env/src/llm.ts:468

      AKASHCHAT_API_KEY: process.env.AKASHCHAT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #da3754c488e630dc — Environment-variable access.

repo/packages/env/src/llm.ts:470

      ENABLED_COMETAPI: !!process.env.COMETAPI_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7e55ff43a3892b92 — Environment-variable access.

repo/packages/env/src/llm.ts:471

      COMETAPI_KEY: process.env.COMETAPI_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aaa62f67a0f09ea6 — Environment-variable access.

repo/packages/env/src/llm.ts:473

      ENABLED_AIHUBMIX: !!process.env.AIHUBMIX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d14b3d8ab26475ec — Environment-variable access.

repo/packages/env/src/llm.ts:474

      AIHUBMIX_API_KEY: process.env.AIHUBMIX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1ffdb895c2500410 — Environment-variable access.

repo/packages/env/src/llm.ts:475

      AIHUBMIX_PROXY_URL: process.env.AIHUBMIX_PROXY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8355a94d96aa2d2b — Environment-variable access.

repo/packages/env/src/llm.ts:477

      ENABLED_NEWAPI: !!process.env.NEWAPI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7e13054a53f49b4e — Environment-variable access.

repo/packages/env/src/llm.ts:478

      NEWAPI_API_KEY: process.env.NEWAPI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eb40fd42583d1f92 — Environment-variable access.

repo/packages/env/src/llm.ts:479

      NEWAPI_PROXY_URL: process.env.NEWAPI_PROXY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #599a42e2952218e0 — Environment-variable access.

repo/packages/env/src/llm.ts:481

      ENABLED_NEBIUS: !!process.env.NEBIUS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4fb203136c29c157 — Environment-variable access.

repo/packages/env/src/llm.ts:482

      NEBIUS_API_KEY: process.env.NEBIUS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8c2dc91c4ace8e84 — Environment-variable access.

repo/packages/env/src/llm.ts:484

      ENABLED_CEREBRAS: !!process.env.CEREBRAS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a81bfc16665d923a — Environment-variable access.

repo/packages/env/src/llm.ts:485

      CEREBRAS_API_KEY: process.env.CEREBRAS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f23f83a30a0d5589 — Environment-variable access.

repo/packages/env/src/llm.ts:487

      ENABLED_ZENMUX: !!process.env.ZENMUX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0ea983b64ffb2c1b — Environment-variable access.

repo/packages/env/src/llm.ts:488

      ZENMUX_API_KEY: process.env.ZENMUX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dce6ed3ffe7b4f76 — Environment-variable access.

repo/packages/env/src/llm.ts:490

      ENABLED_STRAICO: !!process.env.STRAICO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e483ca14d0b5a023 — Environment-variable access.

repo/packages/env/src/llm.ts:491

      STRAICO_API_KEY: process.env.STRAICO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fb1ebabab4fd209d — Environment-variable access.

repo/packages/env/src/llm.ts:493

      ENABLED_LOBEHUB: !!process.env.ENABLED_LOBEHUB,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3882360457146ec9 — Environment-variable access.

repo/packages/env/src/llm.ts:495

      ENABLED_OPENCODEZEN: !!process.env.OPENCODEZEN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4a19a11e6352cb8e — Environment-variable access.

repo/packages/env/src/llm.ts:496

      OPENCODEZEN_API_KEY: process.env.OPENCODEZEN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fbf6f94edfc4f704 — Environment-variable access.

repo/packages/env/src/llm.ts:498

      ENABLED_OPENCODECODINGPLAN: !!process.env.OPENCODECODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #729c029f3cea43ff — Environment-variable access.

repo/packages/env/src/llm.ts:499

      OPENCODECODINGPLAN_API_KEY: process.env.OPENCODECODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7d3894853ae3556b — Environment-variable access.

repo/packages/env/src/llm.ts:501

      ENABLED_XIAOMIMIMO: !!process.env.XIAOMIMIMO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #febd15e844fdb126 — Environment-variable access.

repo/packages/env/src/llm.ts:502

      XIAOMIMIMO_API_KEY: process.env.XIAOMIMIMO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #670eba29812db471 — Environment-variable access.

repo/packages/env/src/llm.ts:504

      ENABLED_LONGCAT: !!process.env.LONGCAT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #44e20e3096441a09 — Environment-variable access.

repo/packages/env/src/llm.ts:505

      LONGCAT_API_KEY: process.env.LONGCAT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6bfe87b2be09afe2 — Environment-variable access.

repo/packages/env/src/llm.ts:507

      ENABLED_STREAMLAKE: !!process.env.STREAMLAKE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fc2c50b0aa6ecfe2 — Environment-variable access.

repo/packages/env/src/llm.ts:508

      STREAMLAKE_API_KEY: process.env.STREAMLAKE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #32c14539cb0031d3 — Environment-variable access.

repo/packages/env/src/llm.ts:510

      ENABLED_ANTGROUP: !!process.env.ANTGROUP_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #052898cd613250ce — Environment-variable access.

repo/packages/env/src/llm.ts:511

      ANTGROUP_API_KEY: process.env.ANTGROUP_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #505b5822d7c25cc1 — Environment-variable access.

repo/packages/env/src/python.ts:12

      NEXT_PUBLIC_PYODIDE_INDEX_URL: process.env.NEXT_PUBLIC_PYODIDE_INDEX_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5b4f7eac0129783f — Environment-variable access.

repo/packages/env/src/python.ts:13

      NEXT_PUBLIC_PYODIDE_PIP_INDEX_URL: process.env.NEXT_PUBLIC_PYODIDE_PIP_INDEX_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5dd583dc847133df — Environment-variable access.

repo/packages/env/src/redis.ts:23

      REDIS_DATABASE: parseNumber(process.env.REDIS_DATABASE),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #19ae31cbc34513e8 — Environment-variable access.

repo/packages/env/src/redis.ts:24

      REDIS_PASSWORD: process.env.REDIS_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #860f63094f4231fb — Environment-variable access.

repo/packages/env/src/redis.ts:25

      REDIS_PREFIX: process.env.REDIS_PREFIX || 'lobechat',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #119a7e205d88dacf — Environment-variable access.

repo/packages/env/src/redis.ts:26

      REDIS_TLS: parseRedisTls(process.env.REDIS_TLS),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #88e3193ea47c2b4c — Environment-variable access.

repo/packages/env/src/redis.ts:27

      REDIS_URL: process.env.REDIS_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #484aec7b13a4f723 — Environment-variable access.

repo/packages/env/src/redis.ts:28

      REDIS_USERNAME: process.env.REDIS_USERNAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bc4896883da252dc — Environment-variable access.

repo/packages/env/src/sandbox.ts:9

      ONLYBOXES_BASE_URL: process.env.ONLYBOXES_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6e07f97039ef71cc — Environment-variable access.

repo/packages/env/src/sandbox.ts:10

      ONLYBOXES_JIT_ISSUER: process.env.ONLYBOXES_JIT_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #27245634fd7f0a84 — Environment-variable access.

repo/packages/env/src/sandbox.ts:11

      ONLYBOXES_JIT_SIGNING_KEY: process.env.ONLYBOXES_JIT_SIGNING_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #00b6db7dc3199750 — Environment-variable access.

repo/packages/env/src/sandbox.ts:12

      ONLYBOXES_JIT_TTL_SEC: process.env.ONLYBOXES_JIT_TTL_SEC,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b13508c3c5670cc0 — Environment-variable access.

repo/packages/env/src/sandbox.ts:13

      ONLYBOXES_LEASE_TTL_SEC: process.env.ONLYBOXES_LEASE_TTL_SEC,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e98e9a90af48cfee — Environment-variable access.

repo/packages/env/src/sandbox.ts:14

      SANDBOX_PROVIDER: process.env.SANDBOX_PROVIDER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #554d6829c1d114b6 — Environment-variable access.

repo/packages/env/src/tools.ts:13

      CRAWL_CONCURRENCY: process.env.CRAWL_CONCURRENCY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1a3e38b723d96a85 — Environment-variable access.

repo/packages/env/src/tools.ts:14

      CRAWLER_RETRY: process.env.CRAWLER_RETRY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d7c1191a699f09e6 — Environment-variable access.

repo/packages/env/src/tools.ts:15

      CRAWLER_IMPLS: process.env.CRAWLER_IMPLS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #94f1060fe01e5097 — Environment-variable access.

repo/packages/env/src/tools.ts:16

      JINA_USE_CN_DOMAINS: process.env.JINA_USE_CN_DOMAINS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8b9c3a2df591b20c — Environment-variable access.

repo/packages/env/src/tools.ts:17

      SEARCH_PROVIDERS: process.env.SEARCH_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1ebced2749b7f060 — Environment-variable access.

repo/packages/env/src/tools.ts:18

      SEARXNG_URL: process.env.SEARXNG_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2bb22fe629e12057 — Environment-variable access.

repo/packages/env/src/tools.ts:19

      VISUAL_UNDERSTANDING_MODEL: process.env.VISUAL_UNDERSTANDING_MODEL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #078244f3d2cc745c — Environment-variable access.

repo/packages/env/src/tools.ts:20

      VISUAL_UNDERSTANDING_PROVIDER: process.env.VISUAL_UNDERSTANDING_PROVIDER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/eval-dataset-parser

npm first-party

expand_more 6 low-confidence finding(s)

low env_fs test-only #2f51e36afa7af76e — Filesystem access.

repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:11

  const csv = readFileSync(resolve(fixtures, 'sample.csv'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2eedb03d2162907b — Filesystem access.

repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:29

  const jsonl = readFileSync(resolve(fixtures, 'sample.jsonl'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #cbcf48bc7bfa1675 — Filesystem access.

repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:50

  const json = readFileSync(resolve(fixtures, 'sample.json'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e1736b03ee04d903 — Filesystem access.

repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:68

    const csv = readFileSync(resolve(fixtures, 'sample.csv'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a550c5261ed89b92 — Filesystem access.

repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:75

    const jsonl = readFileSync(resolve(fixtures, 'sample.jsonl'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #08fb689463382211 — Filesystem access.

repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:81

    const json = readFileSync(resolve(fixtures, 'sample.json'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/file-loaders

npm first-party

expand_more 7 low-confidence finding(s)

low env_fs production #58c3dfb4832f52d3 — Filesystem access.

repo/packages/file-loaders/src/loadFile.test.ts:49

      await writeFile(file, Buffer.from([80, 75, 3, 4, 0, 0]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b16a586a23e3a50e — Filesystem access.

repo/packages/file-loaders/src/loaders/docx/index.ts:19

      const buffer = await fs.readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #55341c540a1f8cf2 — Filesystem access.

repo/packages/file-loaders/src/loaders/excel/index.ts:63

      const dataBuffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2793dab104d8e475 — Filesystem access.

repo/packages/file-loaders/src/loaders/pdf/index.ts:27

    const dataBuffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #86d539b90ff06e4a — Filesystem access.

repo/packages/file-loaders/src/loaders/text/index.ts:16

  const buffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #967eba2d96b22123 — Filesystem access.

repo/packages/file-loaders/src/utils/isBinaryContent.test.ts:87

    await writeFile(filePath, 'a'.repeat(20_000));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e398abebb2560e75 — Filesystem access.

repo/packages/file-loaders/src/utils/isBinaryContent.test.ts:95

    await writeFile(
      filePath,
      Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a, 0x00, 0x00, 0x00, 0x0d]),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/llm-generation-tracing

npm first-party

expand_more 8 low-confidence finding(s)

low env_fs production #2f0ee5592cb7a221 — Filesystem access.

repo/packages/llm-generation-tracing/src/store/file-store.test.ts:44

    const raw = await fs.readFile(path.join(dir, jsonFiles[0]), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e442595a09446186 — Filesystem access.

repo/packages/llm-generation-tracing/src/store/file-store.test.ts:65

    const content = await fs.readFile(target, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #764f84a751d17390 — Filesystem access.

repo/packages/llm-generation-tracing/src/store/file-store.ts:36

    await fs.writeFile(filePath, JSON.stringify(record, null, 2), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c6b36a36bd988c91 — Filesystem access.

repo/packages/llm-generation-tracing/src/store/file-store.ts:47

      const content = await fs.readFile(target, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bdf723180571a16b — Filesystem access.

repo/packages/llm-generation-tracing/src/store/file-store.ts:63

        const content = await fs.readFile(file.fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fdfbea8d26fe8c31 — Filesystem access.

repo/packages/llm-generation-tracing/src/store/file-store.ts:91

        const content = await fs.readFile(file.fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2b38bb9ec169ea72 — Filesystem access.

repo/packages/llm-generation-tracing/src/store/file-store.ts:106

      const content = await fs.readFile(real, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7460b01e66200a4a — Filesystem access.

repo/packages/llm-generation-tracing/src/store/file-store.ts:115

      const content = await fs.readFile(files[0].fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/local-file-shell

npm first-party

expand_more 78 low-confidence finding(s)

low env_fs production #d648bf38aad52b92 — Filesystem access.

repo/packages/local-file-shell/src/contentSearch/base.ts:185

        const content = await readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #5d9c3771f69a326d — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:37

      await writeFile(filePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d611b3dccbcec333 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:51

      await writeFile(filePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d39fb465f91377ab — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:62

      await writeFile(filePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e06a682c2ba20bb1 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:81

      await writeFile(filePath, 'const x = 1;');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #659c0a91e474e2ca — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:89

      await writeFile(filePath, 'all: build');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #04fbd67c8ac78a1a — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:97

      await writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e8d30df307cc08e4 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:106

      await writeFile(filePath, 'A'.repeat(20_000));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #605345be6b60ea9f — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:119

        await writeFile(filePath, 'data');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d841771f86a38552 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:129

      await writeFile(filePath, buf);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #45b19c18240d43b4 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:138

      await writeFile(filePath, 'A'.repeat(27_000));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #af0e92419c9379a4 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:152

      await writeFile(filePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ad50bba29ff2ace4 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:163

      await writeFile(filePath, 'a'.repeat(10 * 1024 * 1024 + 1));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #870ec134a6b7bb4f — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:173

      await writeFile(filePath, "module.exports = { hello: 'world' };\n");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9e1cebb51bb36013 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:189

      expect(fs.readFileSync(filePath, 'utf8')).toBe('hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3fb34c277413dab5 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:197

      expect(fs.readFileSync(filePath, 'utf8')).toBe('nested');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ba5ddfee1b865045 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:221

      await writeFile(filePath, 'hello world\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2fdc8c11e7767fcc — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:231

      expect(fs.readFileSync(filePath, 'utf8')).toBe('hi world\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #6ccf31692a043f20 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:239

      await writeFile(filePath, 'hello world\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c5e21a8b682ec771 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:250

      expect(fs.readFileSync(filePath, 'utf8')).toBe('hi world\nhi again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #25b9dc6bc9c1b9ff — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:255

      await writeFile(filePath, 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d5f17fffff3f45ea — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:269

      await writeFile(filePath, 'price is $10.00 and $20.00');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #93cc87948e53d1ef — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:279

      expect(fs.readFileSync(filePath, 'utf8')).toBe('price is $XX.XX and $20.00');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #7409e1a1f1f7951f — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:295

      await writeFile(filePath, 'line1\nline2\nline3');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2348c4270e3d4649 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:310

      await writeFile(filePath, 'line1\r\nline2\r\nline3\r\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3d433876af982c35 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:322

      expect(fs.readFileSync(filePath, 'utf8')).toBe('lineA\r\nlineB\r\nline3\r\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a21f314a060f0eda — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:327

      await writeFile(filePath, 'a\r\nb\r\na\r\nb\r\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9a6532ff247782e7 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:338

      expect(fs.readFileSync(filePath, 'utf8')).toBe('x\r\ny\r\nx\r\ny\r\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2e217dc67771510e — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:346

      await writeFile(path.join(tmpDir, 'a.txt'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f9472be6ec0ce4be — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:347

      await writeFile(path.join(tmpDir, 'b.txt'), 'b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8c65fcf0c7cc79d7 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:361

      await writeFile(path.join(tmpDir, 'c.txt'), 'c');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #31e6ddffe7398028 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:362

      await writeFile(path.join(tmpDir, 'a.txt'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ac0752e85ac1895c — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:363

      await writeFile(path.join(tmpDir, 'b.txt'), 'b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #eaa76b4890634469 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:376

      await writeFile(path.join(tmpDir, 'small.txt'), 'x');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2e241329dd4884b2 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:377

      await writeFile(path.join(tmpDir, 'large.txt'), 'x'.repeat(1000));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #68c69c65422d0fb3 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:389

      await writeFile(path.join(tmpDir, 'a.txt'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #86d7679494ca3018 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:390

      await writeFile(path.join(tmpDir, 'b.txt'), 'b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #1152f038edfa6c31 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:391

      await writeFile(path.join(tmpDir, 'c.txt'), 'c');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #467baf183340d240 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:431

      await writeFile(src, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c081d50be12b46bd — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:445

      await writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #126cb176a7dd7d73 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:471

      await writeFile(src, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #82d2ced6fc93c7e7 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:487

      await writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #584623a4f0975844 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:512

      await writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #72e7106575ca24e1 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:531

      await writeFile(path.join(tmpDir, 'a.ts'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #50bdddb7c499b7e5 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:532

      await writeFile(path.join(tmpDir, 'b.ts'), 'b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #0cd0cd0d4c546f08 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:533

      await writeFile(path.join(tmpDir, 'c.js'), 'c');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #fe3de4764fd7ac61 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:544

      await writeFile(path.join(tmpDir, 'node_modules', 'pkg', 'index.ts'), 'x');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #636cf4c607cf3e91 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:545

      await writeFile(path.join(tmpDir, 'src.ts'), 'y');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #60283db4f5389d87 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:554

      await writeFile(path.join(tmpDir, '.github', 'workflows', 'ci.yml'), 'name: ci');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #afda9b320f669dbd — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:555

      await writeFile(path.join(tmpDir, '.github', 'workflows', 'release.yaml'), 'name: release');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #560bc46c0c07d19a — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:569

      await writeFile(path.join(tmpDir, 'a.ts'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #244a85d7a1c1f1e7 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:577

      await writeFile(path.join(tmpDir, 'a.ts'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3179b3b542e1f53d — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:589

      await writeFile(path.join(tmpDir, 'search.txt'), 'hello world\nfoo bar\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #62b388de7eee16b2 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:599

      await writeFile(path.join(tmpDir, 'search.txt'), 'hello world\nfoo bar\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #83901b56ddd434b1 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:607

      await writeFile(path.join(tmpDir, 'empty.txt'), 'nothing here');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c0f3bba11e9d821c — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:641

      await writeFile(path.join(tmpDir, 'config.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #6259796ead6a1ae8 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:642

      await writeFile(path.join(tmpDir, 'config.yaml'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c5f2b5296633b6cf — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:643

      await writeFile(path.join(tmpDir, 'readme.md'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #7d7e858c8551afcc — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:653

        await writeFile(path.join(tmpDir, `file${i}.log`), `content ${i}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #24112b24839ee554 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:675

      await writeFile(path.join(tmpDir, '.env'), 'A=1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ddfbf1057605b9d5 — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:676

      await writeFile(path.join(tmpDir, '.envrc'), 'export A=1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #370711fc52d9f78c — Filesystem access.

repo/packages/local-file-shell/src/file/__tests__/file.test.ts:677

      await writeFile(path.join(tmpDir, 'env.txt'), 'unrelated');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3abebfa356faeeb7 — Filesystem access.

repo/packages/local-file-shell/src/file/edit.ts:17

    const content = await readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ff46d2c8f1d988d9 — Filesystem access.

repo/packages/local-file-shell/src/file/edit.ts:61

    await writeFile(filePath, newContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #497e9ec58741b85c — Filesystem access.

repo/packages/local-file-shell/src/file/search.ts:42

          const content = await readFile(file.path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8a7120b61bcf8052 — Filesystem access.

repo/packages/local-file-shell/src/file/write.ts:20

    await writeFile(filePath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #963ff28e95c90344 — Filesystem access.

repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:33

  await writeFile(path.join(dir, 'a.txt'), 'hello\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8abde840b7100858 — Filesystem access.

repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:104

    await writeFile(path.join(linked, 'new.txt'), 'new\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #054cf5b147c5979c — Filesystem access.

repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:242

    await writeFile(path.join(repo, 'a.txt'), 'hello\nworld\n'); // modify tracked

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #431d665176a8e3c0 — Filesystem access.

repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:243

    await writeFile(path.join(repo, 'new.txt'), 'fresh\n'); // untracked add

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ba0295561d58c46a — Filesystem access.

repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:271

    await writeFile(path.join(repo, 'a.txt'), 'tampered\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #7990906e7badebd6 — Filesystem access.

repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:273

    expect(await readFile(path.join(repo, 'a.txt'), 'utf8')).toBe('hello\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e4385bafcfa742c8 — Filesystem access.

repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:277

    await writeFile(path.join(repo, 'junk.txt'), 'x\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #645f477327f7ccbd — Filesystem access.

repo/packages/local-file-shell/src/git/info.ts:138

    const head = (await readFile(`${gitDir}/HEAD`, 'utf8')).trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #495cd04325af670a — Filesystem access.

repo/packages/local-file-shell/src/git/repoType.ts:12

    const content = await readFile(gitPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a7718c5f20fb7dee — Filesystem access.

repo/packages/local-file-shell/src/git/repoType.ts:40

    const commondir = (await readFile(path.join(gitDir, 'commondir'), 'utf8')).trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c3265b6dabe0e45a — Filesystem access.

repo/packages/local-file-shell/src/git/repoType.ts:62

    const config = await readFile(path.join(commonDir, 'config'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e2335fdf0c71a98f — Filesystem access.

repo/packages/local-file-shell/src/git/workingTree.ts:238

    buf = await readFile(absolute);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/memory-user-memory

npm first-party

expand_more 5 low-confidence finding(s)

low env_fs test-only #bc2c7af5443fec85 — Environment-variable access.

repo/packages/memory-user-memory/benchmarks/locomo/run.ts:7

const baseUrl = process.env.MEMORY_USER_MEMORY_LOBEHUB_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9ce2ecefcdf0bf89 — Environment-variable access.

repo/packages/memory-user-memory/benchmarks/locomo/run.ts:8

const benchmarkLoCoMoFile = process.env.MEMORY_USER_MEMORY_BENCHMARKS_LOCOMO_DATASETS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #44cc68802af53239 — Environment-variable access.

repo/packages/memory-user-memory/benchmarks/locomo/run.ts:9

const webhookExtraHeaders = process.env.MEMORY_USER_MEMORY_WEBHOOK_HEADERS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low pii_flow test-only Excluded from app score #68a72650f748a853 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/packages/memory-user-memory/benchmarks/locomo/run.ts:23 · flow /tmp/closeopen-c0i_3jq8/repo/packages/memory-user-memory/benchmarks/locomo/run.ts:7 → /tmp/closeopen-c0i_3jq8/repo/packages/memory-user-memory/benchmarks/locomo/run.ts:23

  const res = await fetch(new URL(path, baseUrl).toString(), {
    body: JSON.stringify(body),
    headers: {
      'Content-Type': 'application/json',
      ...webhookHeaders,
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs production #b62bc2b60f7abf9c — Filesystem access.

repo/packages/memory-user-memory/src/converters/locomo.ts:176

  const raw = readFileSync(absPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/model-bank

npm first-party

expand_more 1 low-confidence finding(s)

low env_fs production #2b302e4777409bf7 — Filesystem access.

repo/packages/model-bank/src/exports.test.ts:12

  const packageJson = JSON.parse(readFileSync(packageJsonPath, 'utf8')) as {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/observability-otel

npm first-party

expand_more 11 low-confidence finding(s)

low env_fs production #f638a3389195ac2f — Environment-variable access.

repo/packages/observability-otel/src/node.ts:20

    'env': process.env.VERCEL_ENV || process.env.NEXT_PUBLIC_VERCEL_ENV,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fa5a6f85959af91e — Environment-variable access.

repo/packages/observability-otel/src/node.ts:23

      process.env.VERCEL_BRANCH_URL || process.env.NEXT_PUBLIC_VERCEL_BRANCH_URL || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #31f79c0b8da5edf0 — Environment-variable access.

repo/packages/observability-otel/src/node.ts:24

    'vercel.deployment_id': process.env.VERCEL_DEPLOYMENT_ID || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e329f7bdca8329eb — Environment-variable access.

repo/packages/observability-otel/src/node.ts:25

    'vercel.host': process.env.VERCEL_URL || process.env.NEXT_PUBLIC_VERCEL_URL || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cbfed5141cb14733 — Environment-variable access.

repo/packages/observability-otel/src/node.ts:26

    'vercel.project_id': process.env.VERCEL_PROJECT_ID || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0a2e3c63e3d86233 — Environment-variable access.

repo/packages/observability-otel/src/node.ts:27

    'vercel.region': process.env.VERCEL_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7e99a3a89535c321 — Environment-variable access.

repo/packages/observability-otel/src/node.ts:28

    'vercel.runtime': process.env.NEXT_RUNTIME || 'nodejs',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6136dbc1728d125f — Environment-variable access.

repo/packages/observability-otel/src/node.ts:30

      process.env.VERCEL_GIT_COMMIT_SHA || process.env.NEXT_PUBLIC_VERCEL_GIT_COMMIT_SHA,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7d7c63ab7c5c1f4e — Environment-variable access.

repo/packages/observability-otel/src/node.ts:32

    'service.version': process.env.VERCEL_DEPLOYMENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ac4a216cb22e3a5c — Environment-variable access.

repo/packages/observability-otel/src/node.ts:39

    'node.ci': process.env.CI ? true : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #857ab9d47a74041d — Environment-variable access.

repo/packages/observability-otel/src/node.ts:40

    'node.env': process.env.NODE_ENV,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/openapi

npm first-party

expand_more 5 low-confidence finding(s)

low env_fs production #0bb012d4d70e3de3 — Filesystem access.

repo/packages/openapi/src/helpers/file.ts:118

          const bin = fs.readFileSync((f as any).filepath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b1b9fa338aa5d6f0 — Environment-variable access.

repo/packages/openapi/src/middleware/auth.ts:54

  const isMockUser = process.env.ENABLE_MOCK_DEV_USER === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e372394f08f2e4b7 — Environment-variable access.

repo/packages/openapi/src/middleware/auth.ts:55

  if (process.env.NODE_ENV === 'development' && (isDebugApi || isMockUser)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #620330844dd82fa0 — Environment-variable access.

repo/packages/openapi/src/middleware/auth.ts:57

    c.set('userId', process.env.MOCK_DEV_USER_ID || 'DEV_USER');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b54a636a79488778 — Environment-variable access.

repo/packages/openapi/src/middleware/permission-check.ts:46

    if (options.skipInDev && process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/python-interpreter

npm first-party

expand_more 4 low-confidence finding(s)

low env_fs production #e5546ed69669dbf3 — Filesystem access.

repo/packages/python-interpreter/src/worker.ts:77

        this.pyodide.FS.writeFile(file.name, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #93bf6bb699b5e163 — Filesystem access.

repo/packages/python-interpreter/src/worker.ts:79

        this.pyodide.FS.writeFile(`/mnt/data/${file.name}`, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6c3afb80e1d40dca — Filesystem access.

repo/packages/python-interpreter/src/worker.ts:95

      const content = (this.pyodide.FS as any).readFile(filePath, { encoding: 'binary' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #19790cf1e3c29a31 — Filesystem access.

repo/packages/python-interpreter/src/worker.ts:175

      this.pyodide.FS.writeFile(`/usr/share/fonts/truetype/${filename}`, new Uint8Array(buffer));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/ssrf-safe-fetch

npm first-party

expand_more 10 low-confidence finding(s)

low env_fs production #3a01bc84a893d8d0 — Environment-variable access.

repo/packages/ssrf-safe-fetch/index.test.ts:35

    delete process.env.SSRF_ALLOW_IP_ADDRESS_LIST;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e20554b0a6605fd2 — Environment-variable access.

repo/packages/ssrf-safe-fetch/index.test.ts:36

    delete process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #270b967c94ebfd17 — Environment-variable access.

repo/packages/ssrf-safe-fetch/index.test.ts:106

      process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #44afd78b15c4fae3 — Environment-variable access.

repo/packages/ssrf-safe-fetch/index.test.ts:118

      process.env.SSRF_ALLOW_IP_ADDRESS_LIST = '127.0.0.1,192.168.1.100';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #29eeb8009e14d1b1 — Environment-variable access.

repo/packages/ssrf-safe-fetch/index.test.ts:167

      process.env.SSRF_ALLOW_IP_ADDRESS_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d6cb509525989cd0 — Environment-variable access.

repo/packages/ssrf-safe-fetch/index.test.ts:177

      process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS = 'invalid-value';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0410f34d67188470 — Environment-variable access.

repo/packages/ssrf-safe-fetch/index.test.ts:461

      process.env.SSRF_ALLOW_IP_ADDRESS_LIST = '127.0.0.1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7bb84ab2a3fce6c5 — Environment-variable access.

repo/packages/ssrf-safe-fetch/index.test.ts:462

      process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fb418e692ef3bd01 — Environment-variable access.

repo/packages/ssrf-safe-fetch/index.ts:72

    const envAllowPrivate = process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #501b41c4450a35ad — Environment-variable access.

repo/packages/ssrf-safe-fetch/index.ts:78

        process.env.SSRF_ALLOW_IP_ADDRESS_LIST?.split(',').filter(Boolean) ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/tool-runtime

npm first-party

expand_more 3 low-confidence finding(s)

low env_fs test-only #aaf5e78fbe7f5a7b — Filesystem access.

repo/packages/tool-runtime/src/__tests__/LocalSystemExecutionRuntime.test.ts:112

    const output = await runtime.readFile({ path: '/tmp/cat.png' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #806cc4de438715ea — Filesystem access.

repo/packages/tool-runtime/src/__tests__/LocalSystemExecutionRuntime.test.ts:134

    const output = await runtime.readFile({ path: '/tmp/cat.png' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #808d01580d6cf2ef — Filesystem access.

repo/packages/tool-runtime/src/__tests__/LocalSystemExecutionRuntime.test.ts:153

    const output = await runtime.readFile({ path: '/tmp/a.txt' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/trpc

npm first-party

expand_more 4 low-confidence finding(s)

low env_fs production #2b313ba31180209c — Environment-variable access.

repo/packages/trpc/src/lambda/context.ts:122

  const isMockUser = process.env.ENABLE_MOCK_DEV_USER === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c4d8a55a977dc7ee — Environment-variable access.

repo/packages/trpc/src/lambda/context.ts:124

  if (process.env.NODE_ENV === 'development' && (isDebugApi || isMockUser)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #77cde423b9866cce — Environment-variable access.

repo/packages/trpc/src/lambda/context.ts:126

      userId: process.env.MOCK_DEV_USER_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #227b92182f44db73 — Environment-variable access.

repo/packages/trpc/src/middleware/openTelemetry.test.ts:70

    process.env.ENABLE_TELEMETRY = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/utils

npm first-party

expand_more 3 low-confidence finding(s)

low env_fs production #df5eb31dada23a1f — Environment-variable access.

repo/packages/utils/src/env.ts:1

export const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7e78990f0927ef5d — Environment-variable access.

repo/packages/utils/src/jina.ts:7

  process.env.JINA_USE_CN_DOMAINS?.trim().toLowerCase() === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #325c514673f081c4 — Environment-variable access.

repo/packages/utils/src/server/apiKeyHash.ts:3

const getApiKeyHashSecret = () => process.env.KEY_VAULTS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

@fal-ai/client

npm dependency

high pii_flow dependency Excluded from app score #f8c27452f180bcfe — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/npm/@[email protected]/src/request.js:52 · flow /tmp/closeopen-c0i_3jq8/pkgs/npm/@[email protected]/src/request.js:29 → /tmp/closeopen-c0i_3jq8/pkgs/npm/@[email protected]/src/request.js:52

            const response = yield fetch(url, Object.assign(Object.assign(Object.assign(Object.assign({}, requestInit), { method, headers: Object.assign(Object.assign({}, requestHeaders), ((_c = requestInit.headers) !== null && _c !== void 0 ? _c : {})) }), (!isCloudflareWorkers && { mode: "cors" })), { signal: options.signal, body: method.toLowerCase() !== "get" && input
                    ? JSON.stringify(input)
                    : undefined }));

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

expand_more 7 low-confidence finding(s)

low env_fs dependency Excluded from app score #2862a06008a9a943 — Environment-variable access.

pkgs/npm/@[email protected]/src/config.js:26

        (typeof process.env.FAL_KEY !== "undefined" ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ecf63adc5859e99 — Environment-variable access.

pkgs/npm/@[email protected]/src/config.js:27

            (typeof process.env.FAL_KEY_ID !== "undefined" &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #837d7e574efd48ee — Environment-variable access.

pkgs/npm/@[email protected]/src/config.js:28

                typeof process.env.FAL_KEY_SECRET !== "undefined")));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bde8335adc2d2127 — Environment-variable access.

pkgs/npm/@[email protected]/src/config.js:34

    if (typeof process.env.FAL_KEY !== "undefined") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #106fa2f4d4ec319f — Environment-variable access.

pkgs/npm/@[email protected]/src/config.js:35

        return process.env.FAL_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #63c471062679bd48 — Environment-variable access.

pkgs/npm/@[email protected]/src/config.js:37

    return process.env.FAL_KEY_ID

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #13240875c2da196e — Environment-variable access.

pkgs/npm/@[email protected]/src/config.js:38

        ? `${process.env.FAL_KEY_ID}:${process.env.FAL_KEY_SECRET}`

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@codesandbox/sandpack-react

npm dependency

medium telemetry tooling Excluded from app score unknown #32a7ae74655af9f1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/@[email protected]__reposrc/website/docs/src/pages/_app.tsx:2

import amplitude from "amplitude-js";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry tooling Excluded from app score unknown #9ff4799303d7c70e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/@[email protected]__reposrc/website/docs/src/pages/_app.tsx:10

  amplitude.getInstance().init(API_KEY);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry tooling Excluded from app score unknown #eac02f05e6add446 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/@[email protected]__reposrc/website/docs/src/pages/_app.tsx:17

    amplitude.getInstance().logEvent("pageview", {

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b9533622b487c49c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/@[email protected]__reposrc/website/landing/pages/_app.tsx:2

import amplitude from "amplitude-js";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #18511f7ffd5dc159 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/@[email protected]__reposrc/website/landing/pages/_app.tsx:9

  amplitude.getInstance().init(API_KEY);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2ce445cb2ec6b063 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/@[email protected]__reposrc/website/landing/pages/_app.tsx:17

    amplitude.getInstance().logEvent("pageview", {

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 20 low-confidence finding(s)

low env_fs tooling Excluded from app score unknown #22cf551f2f861391 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/custom-npm-registry/index.js:17

      token: process.env.GH_PKG_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e853ee8ff6a4e0b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sandpack-client/gulpfile.js:37

const paths = process.env.CI

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #06c05e29dcfd403a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sandpack-client/rollup.config.js:55

          "process.env.CODESANDBOX_ENV": `"${process.env.CODESANDBOX_ENV}"`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa117da54aaee0fd — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sandpack-client/src/clients/node/index.ts:302

              const content = await this.emulator.fs.readFile(
                event.path,
                "utf8"
              );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47b5b9e27411353e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sandpack-client/src/clients/node/index.ts:334

              const newContent = await this.emulator.fs.readFile(
                event.newPath,
                "utf8"
              );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #143da37a2c486ced — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sandpack-client/src/clients/node/index.ts:400

          this.emulator.fs.writeFile(key, value, { recursive: true });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01c549c080edbda8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sandpack-client/src/clients/runtime/index.ts:35

  process.env.CODESANDBOX_ENV === "development"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58e999c4be304cdb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sandpack-client/src/clients/runtime/index.ts:37

    : `https://${process.env.PACKAGE_VERSION?.replace(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f08a9d6ab928a792 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sandpack-client/src/clients/runtime/index.ts:114

                return this.options.fileResolver!.readFile(data.params[0]);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #a7f43956dddf5e07 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/sandpack-client/src/clients/runtime/index.ts:439

    return fetch("https://codesandbox.io/api/v1/sandboxes/define?json=1", {
      method: "POST",
      body: JSON.stringify({ files: paramFiles }),
      headers: {
        Accept: "application/json",
        "Content-Type": "application/json",
      },
    })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #2cd762b8121e5b94 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sandpack-react/scripts/rollup-generate-unstyled-types.js:2

const fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #64f48570d4d6dd25 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sandpack-react/scripts/rollup-generate-unstyled-types.js:8

      fs.writeFileSync(
        "dist/unstyled.d.ts",
        `export * from './unstyled/index';`
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c5c682b907be5dba — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sandpack-react/src/components/CodeEditor/CodeMirror.tsx:478

              {...(process.env.TEST_ENV ? { "data-testId": "read-only" } : {})}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #a186d6f808d15887 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/sandpack-react/src/components/common/OpenInCodeSandboxButton/UnstyledOpenInCodeSandboxButton.tsx:71

    const response = await fetch("https://api.codesandbox.io/sandbox", {
      method: "POST",
      body: JSON.stringify({
        template: state.environment,
        files: normalizedFiles,
        privacy: state.exportOptions.privacy === "public" ? 0 : 2,
      }),
      headers: {
        Authorization: `Bearer ${state.exportOptions.apiToken}`,
        "Content-Type": "application/json",
        "X-CSB-API-Version": "2023-07-01",
      },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #59a118d2a434a36a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sandpack-react/src/styles/index.ts:18

export const { createTheme, css, getCssText, keyframes } = process.env.SANDPACK_UNSTYLED_COMPONENTS === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #63bd315979ef3fd8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sandpack-react/src/utils/useAsyncSandpackId.ts:22

const sandpackClientVersion = process.env.SANDPACK_CLIENT_VERSION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec378a859f733b2f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/website/codesandbox-theme-docs/src/contexts/config.tsx:60

  if (process.env.NODE_ENV === "development") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #39604549f07b8267 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/website/docs/src/pages/_app.tsx:7

const API_KEY = process.env.NEXT_PUBLIC_AMPLITUDE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61ea4d9de4be84cd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/website/landing/pages/_app.tsx:6

const API_KEY = process.env.NEXT_PUBLIC_AMPLITUDE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c1cd6ea23c071fc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/website/theme/next.config.js:1

const BASE_PATH = process.env.BASE_PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@ant-design/icons

npm dependency

expand_more 1700 low-confidence finding(s)

low env_fs dependency Excluded from app score #f36bd5008b3513ff — Environment-variable access.

pkgs/npm/@[email protected]/es/components/AntdIcon.js:65

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee90306db58034aa — Environment-variable access.

pkgs/npm/@[email protected]/es/components/AntdIconLight.js:51

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c6281dc70179c54 — Environment-variable access.

pkgs/npm/@[email protected]/es/components/Icon.js:79

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d112386fc3723809 — Environment-variable access.

pkgs/npm/@[email protected]/es/cssUtils.js:150

  if (process.env.NODE_ENV !== 'production' && typeof console !== 'undefined') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8efff1d4a9f25599 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AccountBookFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f124b49b1330aeac — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AccountBookOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #27aebd0e8ec5e562 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AccountBookTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d4bc983701af6e6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AimOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #69b0154b61ca1775 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AlertFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da3f6c47226ef514 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AlertOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #790965cb4b55d581 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AlertTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9cdbe85045d08660 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AlibabaOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2416597e69425c36 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AlignCenterOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9366bbec5afeeb91 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AlignLeftOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ce07818b18f8089d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AlignRightOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ae634d78e21c81cf — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AlipayCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2912b3a49a37c819 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AlipayCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #75724e5af952a130 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AlipayOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85516ed5bdb58522 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AlipaySquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2de4def53540388a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AliwangwangFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0baf58ab732fa0e6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AliwangwangOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4e998f1778257a86 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AliyunOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c7203a698cad785 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AmazonCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d781a76e56ee8ed — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AmazonOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3e1b23294a2510b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AmazonSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2668dde4312e1a0e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AndroidFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #93a5a2a5461958f7 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AndroidOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #052b2cf6dd110877 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AntCloudOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6d0a4deaf62ba84 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AntDesignOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ffdf87befda1b56f — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AnthropicFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e557a33693f47be — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ApartmentOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #71b284ccdca70e37 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ApiFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ab7a8c82bba0645 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ApiOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #29aba0e20465f3a1 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ApiTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e29824a519c3e25 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AppleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #425050039f1fac33 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AppleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a0541d05b342aea — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AppstoreAddOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51e39185c0a8e443 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AppstoreFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #21399bf8bec98d8e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AppstoreOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #afa938d2306cc45d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AppstoreTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb6ecd62e881890a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AreaChartOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5fb930a8c3056e9b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ArrowDownOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #333139be8f3dd783 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ArrowLeftOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #11c38cfde5293b93 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ArrowRightOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ba5cb12d72c7bed — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ArrowUpOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2808a2227de5f4e0 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ArrowsAltOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6bb34bf6b7e854a6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AudioFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #667cc1a2359a4157 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AudioMutedOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a4b43b0ef84aadf — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AudioOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d4e7b7b51e1528ef — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AudioTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e58a879a708db8cb — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/AuditOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f2fc20f5e67aafab — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BackwardFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e45a4fff0c9f95d8 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BackwardOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b282db1926c6eeb — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BaiduOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d2fdb1b2fe903639 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BankFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d99cc3d149cd43c1 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BankOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2db99daffcb15255 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BankTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e47c615ac691c414 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BarChartOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cbadad597d002e5b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BarcodeOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7107a6c251a732d1 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BarsOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e36f8144734f8f7 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BehanceCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85867791f97c45e3 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BehanceOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7689d2d657b9319 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BehanceSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #14e15d849d297bc9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BehanceSquareOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #191edaaae2368159 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BellFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #64db462d52da5db1 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BellOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ddb4ff8c5fa3595 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BellTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c8327c60eb1e7f26 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BgColorsOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f9561eb2283f4e5 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BilibiliFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a9d6c02fb48d34e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BilibiliOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e80a966565c005d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BlockOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84a9ec47c404f5c9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BoldOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d83b7d295f4f3dbe — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BookFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8db13e9bd2dfb203 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BookOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a15d6376787431a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BookTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b992732d6488c7a2 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BorderBottomOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8ae95075f83ed17 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BorderHorizontalOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0694ab6f902f1248 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BorderInnerOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee54aad525ff27a8 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BorderLeftOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ed1de67acff4063 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BorderOuterOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #07f87aceb092e011 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BorderOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a99b7ad98cc0be7 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BorderRightOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f55d75011f12cb7a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BorderTopOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #480a54029400855c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BorderVerticleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ae5bebe9baed0ec — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BorderlessTableOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d942d1136112f319 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BoxPlotFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9bfd6155e74620fb — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BoxPlotOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f0852478603a59a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BoxPlotTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0442a1f8f50f9f05 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BranchesOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #612c3d552ebd5923 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BugFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b12776f6adb6e7da — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BugOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #039ccf24ec4e31cd — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BugTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e7c2fee281d7ce36 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BuildFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #39bae9e516c9fe83 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BuildOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b95399867b0fb44e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BuildTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #936a4af705e81c5e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BulbFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d111667fbb666ffa — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BulbOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c2f77c9fc760513 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/BulbTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ac437121e1012e6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CalculatorFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d8b4da2594b54f5 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CalculatorOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b9725c9a118712b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CalculatorTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b70250da178ee30 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CalendarFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8273d69876ee1327 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CalendarOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dca0cdcffa53128f — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CalendarTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5df759d4b6c15948 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CameraFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #26a2f1dec2f61e37 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CameraOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #74f27532c83adb79 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CameraTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #363b2fe871475708 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CarFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #00c469eac10f89a2 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CarOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dce1c0f5e622f78a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CarTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab5d3beb0fbc4ba6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CaretDownFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b2a9ad66ba8c61a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CaretDownOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97694b2d9f5068bf — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CaretLeftFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5eb4f7914b149e61 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CaretLeftOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d90aea871bb2836 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CaretRightFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e97690ce29f3c8a8 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CaretRightOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e657baa02470e82 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CaretUpFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #57eef23e46ba80e4 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CaretUpOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d433189f33e03384 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CarryOutFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67065c4be634a603 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CarryOutOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #29d4175d97afc636 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CarryOutTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8dea0bd77b794d90 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CheckCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a734bcd844940e1b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CheckCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e3b52e229288adbb — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CheckCircleTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8489cba0db8d4bc — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CheckOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b0b8c6e6c32566b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CheckSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ff65edd867d8b01 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CheckSquareOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b2005bc9b1bcbfa — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CheckSquareTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f7a8b869ef94fe7 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ChromeFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6536d8d9d2939061 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ChromeOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #243de5d000d07025 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CiCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bbd1261570615786 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CiCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d55ae4a93cf3c4b2 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CiCircleTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #41ba1dc4cbca0479 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CiOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08cb2bb19e1a9aea — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CiTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c14ab81b880f1024 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ClaudeFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #56aa5a41ea145c3d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ClearOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f8a8f69f752494c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ClockCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7aa254d77ee24558 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ClockCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #128cea0009d37662 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ClockCircleTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c365dfd76f2a892 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CloseCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a1f9ad2373fe6283 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CloseCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32ad601ec408a912 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CloseCircleTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0257ac6a9b78a69 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CloseOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #33f96e342c5981c3 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CloseSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec5e0171980b5519 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CloseSquareOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fdfb7d058a4b9ed4 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CloseSquareTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd2f2720a76d7486 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CloudDownloadOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e6a111a9b079119 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CloudFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b514d84620bcf43 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CloudOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bcac96897213ef67 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CloudServerOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #35dca9a657bb0bc4 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CloudSyncOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c049469fec3ff86 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CloudTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c1eb7b05e35ff8b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CloudUploadOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51cf09018b7f8937 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ClusterOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d2b916a9015ca6b9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CodeFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f33b9ebe353ddb38 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CodeOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58de0894cdc29927 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CodeSandboxCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ca0f9f171b2c690 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CodeSandboxOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d4bb29674ed940b8 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CodeSandboxSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #789f0808eb10b37e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CodeTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80f3414c0a38289b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CodepenCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #451696996b573ba0 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CodepenCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49112409152bbbc4 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CodepenOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #05720ead5b3d6852 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CodepenSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f89a1a182721f3c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CoffeeOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fcdb1c118fadbeda — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ColumnHeightOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b963f0e1d2188814 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ColumnWidthOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d444f941e607581 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CommentOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #955d53dce8aa367f — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CompassFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ced29a0823c5ee8a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CompassOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #17bddde60fb6d340 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CompassTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d8a8fb713d1a5b6b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CompressOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #406f0f8ec7e1318f — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ConsoleSqlOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c4ef0b425ad047a1 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ContactsFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d6549a6137e8105 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ContactsOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7601c6e25b7a4976 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ContactsTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46249c46c051a8c9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ContainerFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d393eda6544444e6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ContainerOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e5cb3c69cc875897 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ContainerTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cab9d43f9f64d9c7 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ControlFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #26626225d093b8e3 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ControlOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fd7d45caa19e7e58 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ControlTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d7c800fa5940eec — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CopyFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8408817dc3afec11 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CopyOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7a9abf15946ed5c3 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CopyTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb26d4e993ec160b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CopyrightCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb1c2627f22d0417 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CopyrightCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d15cbf3dd378e5d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CopyrightCircleTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9f30da7a2defd81f — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CopyrightOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #60521ad774d50e96 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CopyrightTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d80016e433774cc — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CreditCardFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c53e969155281430 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CreditCardOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f6a0599bd5b71e9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CreditCardTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3516ac84075d07f9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CrownFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bbfbf7b38c75dc56 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CrownOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0d711e8e1593369 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CrownTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d308ffac985a9dd — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CustomerServiceFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df1fdbb6a1ab0cef — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CustomerServiceOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3716d7d239a81b93 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/CustomerServiceTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #577ae3521a1e2daf — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DashOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #527ce2fd351c7f07 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DashboardFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #042b93888911f435 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DashboardOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e1eeffe8cc9cf57 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DashboardTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d68627cc1fa08a4 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DatabaseFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6bc6c546ca517010 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DatabaseOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0adb9b6ffe3ade2 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DatabaseTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e1f4bd6875adcc93 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DeepSeekFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1d717fbed0ca450 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DeleteColumnOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #378e211004ffded6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DeleteFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #037364b2da20e16d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DeleteOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #566ea1fdced2588e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DeleteRowOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7dd757aeeb74befb — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DeleteTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #404c28831b1bb829 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DeliveredProcedureOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32251d0b4836fd2e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DeploymentUnitOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b7e6106300d7907 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DesktopOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e62712cca743ee8c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DiffFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4483415fb2b0883b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DiffOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e79fb2fc2c565d0 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DiffTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b434fb972ee7ca6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DingdingOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8656765c631bf1c2 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DingtalkCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d4f1ce61359b9fa5 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DingtalkOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #966a77e24fb3f8a8 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DingtalkSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b7f9af6cdae4ea9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DisconnectOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f243f5c75c7227ec — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DiscordFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb6a6b2b8e5f9274 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DiscordOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7cec6ec415bd6ea4 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DislikeFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7782d79e88360356 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DislikeOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da614682d85aabb4 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DislikeTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #38f2f1461447abf6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DockerOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #07aee531679fc0e0 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DollarCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4928e0e7c17b7419 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DollarCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #23585b83ade2a4c3 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DollarCircleTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84b926fa56b422ce — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DollarOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #338f3feaf6b81505 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DollarTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67341a7c368ded5c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DotChartOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #de1b20370ba5530f — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DotNetOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0af8da8fb534510 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DoubleLeftOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f8b84787c5cf3eb6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DoubleRightOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2275da56d8b577c8 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DownCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c1e8d5d35a39b2de — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DownCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f8a0caf4683ed7ee — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DownCircleTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #52bdbaea3c7fd8d7 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DownOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a98b36d9d579c452 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DownSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0234ac5c0fb20267 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DownSquareOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #72fe09f6261a5cba — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DownSquareTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3506748d53011557 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DownloadOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f2f7b73d510f473 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DragOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #272e861d2cb68ca4 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DribbbleCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #23b17080c62ddde7 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DribbbleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2423ff002d64831d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DribbbleSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b0bd1bfc5b1b0ce — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DribbbleSquareOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e2dadcc027b5dea1 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DropboxCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f42417bce0f02d3 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DropboxOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7043a33fba75138 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/DropboxSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6adec451f8ac87dc — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/EditFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee15783abb0a0888 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/EditOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a866568f321632c1 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/EditTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #035291a2166a8b5e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ElevenLabsFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8bb55482a83d7ef8 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/EllipsisOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #99e9bbee749b5fb7 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/EnterOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97e0e935b719060f — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/EnvironmentFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5cc597bcb1cf3b9d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/EnvironmentOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f90f529be1ceb3ec — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/EnvironmentTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24d8c3c0972fc2df — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/EuroCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bde91f0008c87104 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/EuroCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9da06726ad840338 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/EuroCircleTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4e7b3c5110b7e55f — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/EuroOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0889999bec261825 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/EuroTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e100b76c27740cc6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ExceptionOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #11f45b308362b025 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ExclamationCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e7db11bf45863cba — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ExclamationCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e16d8c8ac0c7d9b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ExclamationCircleTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #72e5bebd2e443b6b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ExclamationOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf9fe67e2d809390 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ExpandAltOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d5e5813db5780d1 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ExpandOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c220dfe3786184d0 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ExperimentFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a7e98585c901bcc — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ExperimentOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #07c4d4cde4b1ddf4 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ExperimentTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c4f9f00b07650125 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ExportOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3cafa80810e8c62f — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/EyeFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #93931f94fae2629e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/EyeInvisibleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a961e72072318d1d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/EyeInvisibleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1068c15bd94552c5 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/EyeInvisibleTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #126848b95b8458d5 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/EyeOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0fd5c919ffda96ae — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/EyeTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6216f8616960c4fa — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FacebookFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9486562b8c5f8eeb — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FacebookOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #807fe6ee7f623f1e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FallOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #441ec787f44de614 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FastBackwardFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1c426e8340539db4 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FastBackwardOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bba624d722b1f315 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FastForwardFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c41057ea81384822 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FastForwardOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fee8ae7d6461c4c7 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FieldBinaryOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd0e33aeaed62435 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FieldNumberOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #18e8155ab39b2554 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FieldStringOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #258e13e9e7b3a002 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FieldTimeOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ede3f88f4677d9c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileAddFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #421ab1156e0fdaa0 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileAddOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #03e4b6e6908c38b6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileAddTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c9be815c37ab582 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileDoneOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #63f8d8f6148628c3 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileExcelFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c34e67fdc99d0cf1 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileExcelOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #22e5e72d807ba6aa — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileExcelTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1db4df9e7fd7fa1c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileExclamationFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #abc946d09792e751 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileExclamationOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a1b22114e12be45 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileExclamationTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be14914d8c473d53 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9e4dcf05920beca — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileGifOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bcacfafdd66f2b98 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileImageFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0d1524b88ae5523 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileImageOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a274871058b9af99 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileImageTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b31a69c66787715 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileJpgOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd39f3f5cb9e377c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileMarkdownFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #054770d8203a3b51 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileMarkdownOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84920145d69a88c9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileMarkdownTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d3dfdb06bda4592 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ee4f8697eb70ecb — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FilePdfFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0a5446eff8d3fca — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FilePdfOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e6b10493d291a56 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FilePdfTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ae1bf7b3ed3fb46a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FilePptFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e21bfef260c2255 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FilePptOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #acade70094aa421b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FilePptTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6983ebd97d030be5 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileProtectOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2368e31f2634fd49 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileSearchOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5155aa5da1471940 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileSyncOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43d816950f7d01bd — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileTextFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ff4a7cf6cb5773e7 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileTextOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea47d9416cd85ed2 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileTextTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #19b2eab7d1ad8575 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #094f9759f5b2ae6d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileUnknownFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df73246bd7948d3d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileUnknownOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a50343da478a09dc — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileUnknownTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ae27b18b26b69293 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileWordFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a6b4978f92d707a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileWordOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7af0d1a44385688d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileWordTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f4a75bc4297ad552 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileZipFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f83e71dc3c908d5 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileZipOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b1c765014d15c79 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FileZipTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a9d002c9d9baded — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FilterFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4effcce342c84b05 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FilterOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #57d288fb3b38f0d8 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FilterTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7c182fdf42d415e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FireFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f65c40376b526e12 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FireOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dbc7366ca00bd7c0 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FireTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #abf30c3b5b0831c3 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FlagFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ff460a37ea55acd — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FlagOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9aa51bbe3b7bd88c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FlagTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e4763a7924c4ce9a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FolderAddFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #99ff1e9c4b410701 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FolderAddOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7bd57136611493c1 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FolderAddTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #12fef94a5ab46157 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FolderFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #600940ae9a99fb46 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FolderOpenFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #090b09e7677c0a98 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FolderOpenOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #09e5fd0dedf6b5de — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FolderOpenTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #afcfe467828ad65b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FolderOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e50af8d4c6fbbc0e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FolderTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a73e180d0ce45dbf — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FolderViewOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e988f877a1639d5c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FontColorsOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af573243e8a11958 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FontSizeOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2763a783be15f94b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ForkOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #744437aa1e60c777 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FormOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #973373492abc3d82 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FormatPainterFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #078123bcc1755282 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FormatPainterOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b629fad40570376 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ForwardFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08e24eb0eaabd0ba — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ForwardOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0195e6745f5e891 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FrownFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e0d932345242b8d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FrownOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37ed362183a9f9f1 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FrownTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #59e2c740ca9b813d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FullscreenExitOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b021a882b11428e4 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FullscreenOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ec2272594e37263 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FunctionOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f3a247f344d858d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FundFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #03adbba12dcfc300 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FundOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4acb516d44b0e8c9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FundProjectionScreenOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #26f529aa4a10ca73 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FundTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b01c87ed539356aa — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FundViewOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7cb107631649dd36 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FunnelPlotFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cfb9671dc9bcdf84 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FunnelPlotOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #77d93f6890b39292 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/FunnelPlotTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4bb6746631cb7c29 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/GatewayOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fbd2a43898be4780 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/GeminiFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #44687d8e289fce33 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/GifOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ece8de2ff492b7e5 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/GiftFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cdb8c3ee42ad079e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/GiftOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c433cfe692efa483 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/GiftTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #074819fecfd10dba — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/GithubFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bad5b869be78d180 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/GithubOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f952ba81f4499c09 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/GitlabFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3cb1f28adccb545 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/GitlabOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #399091f8f40bb181 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/GlobalOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d7c5073aaef6eca0 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/GoldFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2134d9a445f48e9a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/GoldOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d6e1594cedd1fa3 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/GoldTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #35dd817df6d06d28 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/GoldenFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #65e81ca5178daec0 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/GoogleCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2db9811fe0d9a04 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/GoogleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fbe40018092350d4 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/GooglePlusCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd0097a49f330a8f — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/GooglePlusOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b4976e7c83be5464 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/GooglePlusSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fbd41ed9210b5303 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/GoogleSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d8c8d683289bba3 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/GroupOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #584b4d2e8b6f139b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/HarmonyOSOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b15d493769692529 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/HddFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e493d23bd0ec48db — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/HddOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9478ba3834ee105 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/HddTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9fe2d6f3a7d2d2a6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/HeartFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b181cb1ad9d31564 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/HeartOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #886dc74b423fe4da — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/HeartTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #69a090c21714c087 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/HeatMapOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a7346644b6a1519 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/HighlightFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d275c6b6e797ab4 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/HighlightOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9899543c03215a34 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/HighlightTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed1d1800452a9c15 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/HistoryOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8932b3ca23c78185 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/HolderOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf1930d7e0a47a09 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/HomeFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #86a6addf21eb4dd2 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/HomeOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50cc03caab178963 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/HomeTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #98a0814ff6bf4c57 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/HourglassFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01b343a66b27b542 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/HourglassOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c055433cd192832b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/HourglassTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be3449f3987c8664 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/Html5Filled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e72e8f268ce25d6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/Html5Outlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d5be64a0f137c82 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/Html5TwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #75e0e04a5c822c53 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/HuggingFaceFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85cc7328fddd51f1 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/IdcardFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b404175d4e81ee2 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/IdcardOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25ccf744728fa65f — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/IdcardTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #adf557632c985569 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/IeCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc4e8f5c2e59e29e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/IeOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43ce89dcde529af7 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/IeSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #05dfb0d8301a5bc9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ImportOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e24a0c1c9dcd3ffe — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/InboxOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe218f2216a02b68 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/InfoCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9eaa90eda91deef0 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/InfoCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #783f0292f6796384 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/InfoCircleTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ebd3617d4b448993 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/InfoOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b392410fa2d2945 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/InsertRowAboveOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5378c0744a309af0 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/InsertRowBelowOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #942db3194c7d76a9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/InsertRowLeftOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #576708304070d5ee — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/InsertRowRightOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7ac89cfc51f0acb9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/InstagramFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a042bc6fad95678 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/InstagramOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #703a268727f30a41 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/InsuranceFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc8fbf488cc7e528 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/InsuranceOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e76c75ed972764f — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/InsuranceTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #040ff233bbcd3866 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/InteractionFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a2fc4159dbdb1c25 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/InteractionOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4dce003e4aa8ef4a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/InteractionTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #daf7986da2f18e8b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/IssuesCloseOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6100f4c0814e899b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ItalicOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5b4d5dba168229a9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/JavaOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #700a87dcaeb1ac2c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/JavaScriptOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5bacb734a222d12a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/KeyOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d861630e5310d03 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/KubernetesOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eca411c8db8efaf1 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LaptopOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #033f4cffb59f8366 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LayoutFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1db8f1424064a345 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LayoutOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db7c0ab5c14f827e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LayoutTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #634ee102e630d91e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LeftCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #59545282b7e6e381 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LeftCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c20a3566a850089 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LeftCircleTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d7fce4ff82edda1a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LeftOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a14a7bd0bb2f8198 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LeftSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51af3cfb264d3049 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LeftSquareOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #daf8593f102099fa — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LeftSquareTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ca31e0652224efa — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LikeFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c021cc766890b929 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LikeOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #00b7a719a4c02805 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LikeTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc7112767f9e7c40 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LineChartOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a2e52fe27dba9aab — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LineHeightOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7eb01907e1ccedba — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LineOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #acec2fd2a1c9c31a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LinkOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #83d3b2611d4b9118 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LinkedinFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6374470200ebab07 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LinkedinOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c95dce80bbf8fc1e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LinuxOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #faac3142b9212ae0 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/Loading3QuartersOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7822a890bc9da3b2 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LoadingOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4944ef2ae673213e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LockFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ea858692e5de860 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LockOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #989e0f87ad13b09b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LockTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2eb9ef091aca0ab — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LoginOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b1a01beb8731e38 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/LogoutOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #23209ed4b2182024 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MacCommandFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #98198e7e2c590a3e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MacCommandOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4701828057de90dd — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MailFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6539d8b05d3560de — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MailOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ab63cc3c3172cc6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MailTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #472f7f10bc84f7bb — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ManOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8250a493c9f6b4fe — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MastodonFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2af03e29efb32e06 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MedicineBoxFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84520621ad652102 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MedicineBoxOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb7963643467e67c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MedicineBoxTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d38bffc45892869 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MediumCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c32201f7aae686c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MediumOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5295d57a32e48a08 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MediumSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b10bfd62354d9101 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MediumWorkmarkOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9f97896228d44c1c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MehFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f27f0308d4b6a95f — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MehOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ab10d01e5e5f739 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MehTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #457fc1bf35b27e3c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MenuFoldOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f69980bddbda7763 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MenuOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76aa436c76de34bb — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MenuUnfoldOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db96be9fec2d3d53 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MergeCellsOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #89e18a30d5b7e04c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MergeFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4dae3d847d044c28 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MergeOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #00eea13231468a42 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MessageFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #adda1bea0ab6d18c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MessageOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ecf1c49369f723e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MessageTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #44e8fa3a190bcd3b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MinusCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d2318f9a8a337c49 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MinusCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e48234ecc91df1b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MinusCircleTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8c700d568ca7ec6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MinusOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #582dc2631a3a2ce4 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MinusSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f708136a54da73fb — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MinusSquareOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ec689b2c59e0f1c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MinusSquareTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62ef136fee83ca81 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MistralFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #91a90fb6c2c13395 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MobileFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4e79f0ef8c356904 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MobileOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #028e6064197973cb — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MobileTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4e80e35808ef930e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MoneyCollectFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0056198f68ae1099 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MoneyCollectOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a733d2bd93b8608 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MoneyCollectTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1c910bde0f44620b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MonitorOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e43f6f21bee0fe19 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MoonFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3edb4d792bfc74f9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MoonOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b42349a21ae85cc5 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MoreOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fdef47cc3f54a0f9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MutedFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1344f41a4099869f — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/MutedOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d4361ad8d59d32f — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/NodeCollapseOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6faa4903884c5f0 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/NodeExpandOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4bb7de1f8903dd1b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/NodeIndexOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e029e5c95072669 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/NotificationFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2007bf5dff880c4b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/NotificationOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #099852458a14ce1d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/NotificationTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ffaae956f84ebebb — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/NumberOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #93cdf1f139dab085 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/OllamaFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c4b6008009bc8d38 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/OneToOneOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c418dd2fa4b85c6b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/OpenAIFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e63ddc42aab56ce5 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/OpenAIOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0d4150507e64dc8 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/OrderedListOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01f6238b60ee17f7 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PaperClipOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dcf0444f67ae6b13 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PartitionOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9ae2e383c625cfa — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PauseCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #524c44e5635c8123 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PauseCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7aa87304faddfbc6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PauseCircleTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #93be492c65314eab — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PauseOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #550e452f763dad8a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PayCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ab4e2b805046610 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PayCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #11fb95ed6f06e831 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PercentageOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0873a91501ce4bbb — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PerplexityFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #534377369604047c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PhoneFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8dbeb86fd5758fd6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PhoneOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #beccf78cff23876e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PhoneTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #afb1ea090d337093 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PicCenterOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cde00314e0558138 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PicLeftOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d672f1799bc6318c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PicRightOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f793a0c0d093bb9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PictureFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1e1cb791f28efc1 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PictureOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #239ee62cc8f2845d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PictureTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee46ad27111154ef — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PieChartFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d93bc311b0062f84 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PieChartOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e8c1b9d4c78b206 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PieChartTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #084d545e32620230 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PinterestFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0511155dff9369af — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PinterestOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a68436f77534559 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PlayCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bede6dbd5e7c0d36 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PlayCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9cfee36f755d94b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PlayCircleTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #82ff14c8c0ab0377 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PlaySquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #18eacee35bfe853d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PlaySquareOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0306e549e03a4dce — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PlaySquareTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a2095d5d19664820 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PlusCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ea40413a78b0be7 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PlusCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #efc8bc61166acc87 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PlusCircleTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2751eaae9607bc1d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PlusOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb80b557e5e7b22a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PlusSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe73bc9e2131dfc9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PlusSquareOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9e45ad6a96ccc52 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PlusSquareTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f78a6a3ccd950523 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PoundCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2766ccf9eb9f0234 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PoundCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af9561390f0bcb49 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PoundCircleTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f500a7ce5b04aef6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PoundOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40340ace75efc2e9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PoweroffOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d6983d9909bd6f6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PrinterFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d7438337208340c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PrinterOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8893d9ca6b40576f — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PrinterTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d8fb7e5744b7ed94 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ProductFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a59a058a64da6161 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ProductOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f8f886b237af14bb — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ProfileFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d56b7c055764826 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ProfileOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e222ff7d34d628ab — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ProfileTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d26fb1f8a25261c9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ProjectFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #60546e4a30ca06cf — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ProjectOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e2f6acf34da2afc — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ProjectTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d393710a85fb8bd — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PropertySafetyFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #552cd9a03fe18d08 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PropertySafetyOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #faed8001107fdd81 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PropertySafetyTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #250861e741625f78 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PullRequestOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #453eef6eaa16ca5d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PushpinFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb5d27397a057882 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PushpinOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7aa830c23276e21 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PushpinTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #041d8d0aadb1aea2 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/PythonOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e04aca1f986cd6b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/QqCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee99035e8a4e92ce — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/QqOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #826281c706d0b64d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/QqSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a0c318ad07de423 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/QrcodeOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b297bc467f5aee3 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/QuestionCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62a20057d7bb2c21 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/QuestionCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2890d99a4fdf26e8 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/QuestionCircleTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6915c581d13efb21 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/QuestionOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e0acc5d5be7e842 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/QwenFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58e160f6a6d143ea — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RadarChartOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ab2410b4f41077b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RadiusBottomleftOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e799b837d53c21e2 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RadiusBottomrightOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #962f16080079e33e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RadiusSettingOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #64693c8f0ae91b38 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RadiusUpleftOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40066e1ff3f085b4 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RadiusUprightOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b51ac34d5e79ff45 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ReadFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d8c17de35001d1c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ReadOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #593d3e0b8fac42d6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ReconciliationFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a487a3c1a6f8fe3 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ReconciliationOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8808899930cc27d1 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ReconciliationTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #77ca8c16fe0c37a3 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RedEnvelopeFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76c2f641d52184c9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RedEnvelopeOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a80a898163de271 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RedEnvelopeTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d5ee09ec1edcea9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RedditCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c64493ee8dfebb9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RedditOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #72e646b07965081c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RedditSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cee83c301614bd4f — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RedoOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a27e4781e896fd1c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ReloadOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50c55a241e02c5a1 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ReplicateFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b738d8a8fd240aa1 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RestFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #728ee9e706db8916 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RestOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3bc9cd8b42d8c22 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RestTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #81cdff96a1eb57c0 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RetweetOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5800222254ffb6be — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RightCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c27718525b52afda — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RightCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #911fc4ee19be782e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RightCircleTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a257bcdb04486f2 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RightOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #232857aa8480639e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RightSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #29ec106c2d056000 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RightSquareOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #94eda1ce3efcb264 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RightSquareTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9dd9397a483ac9e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RiseOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b5b916365d22f3b6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RobotFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a0bd9f7eb70984c7 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RobotOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9eb42aee661ca4c1 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RocketFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc12d867c7f1ecb6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RocketOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f819a45e9fd0e99 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RocketTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a39ff4e9f5ca08e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RollbackOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba50cf869af0fdad — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RotateLeftOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2b605b1c65fdcab — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RotateRightOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #677a3ca35c2ec34c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/RubyOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a1d0a81b27163f0 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SafetyCertificateFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #837f6febee42965e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SafetyCertificateOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a3b1528ea4f81c6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SafetyCertificateTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e2b82cfe0ac0d8e3 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SafetyOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #31afd88707b52fc4 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SaveFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #016bd6df00074e3b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SaveOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95bc9eee9879f16b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SaveTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0acfc4772f1efcc7 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ScanOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d85885b8aa13a4c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ScheduleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80c73e7ae13f61e4 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ScheduleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #491d089477fe7999 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ScheduleTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8980c474e226e11d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ScissorOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97a7cd8883b1b733 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SearchOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #60b0c2c1d22486d1 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SecurityScanFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d946a42ffc54d5d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SecurityScanOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a5b26f82def2a115 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SecurityScanTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c66906b02df22a9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SelectOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9d3caf6d80c2304 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SendOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f8988930e282de20 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SettingFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c1b464897e3bedbb — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SettingOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #282537c428edad5b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SettingTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #730198d696d221a5 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ShakeOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95afd40cf6bd03ca — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ShareAltOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d6372ae501071323 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ShopFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #878594940747993b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ShopOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6726b8e4dbbe3cc7 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ShopTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #94130fcb5b26a24e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ShoppingCartOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46757fcf7905c2aa — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ShoppingFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a1478003f8edea36 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ShoppingOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab8b0bae8de60738 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ShoppingTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8cd7387ea4d1925 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ShrinkOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #15d07960823f4914 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SignalFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f2c93b7bf9a26d2 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SignatureFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab66bab553913fc3 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SignatureOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #461385d267d02cfe — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SisternodeOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be62d975386ca066 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SketchCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ebe0ccc38d3f8f3 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SketchOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #717fb3788906b533 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SketchSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #30386ce445fcf71b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SkinFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f40506e35dbe309 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SkinOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10665f5ab4f16b47 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SkinTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a73308bd626f0a81 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SkypeFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cfa52a311856fe19 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SkypeOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f0bcaf347159d1d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SlackCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7dab892ed040925b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SlackOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd3a5f9103c8315e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SlackSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a0b2d805f7d2b52d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SlackSquareOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #694662bc4bb98bcf — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SlidersFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10efd0d233edd40f — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SlidersOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #485897782713663a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SlidersTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9f04ab783939d3b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SmallDashOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d403de133dd9105e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SmileFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #375cbc66dd591601 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SmileOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dda3a4597ff82cd1 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SmileTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6492f5cfc1fefa73 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SnapchatFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4acd60d6c8ef1511 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SnippetsFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #65fb8f67202b26c5 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SnippetsOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1cef65534774652d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SnippetsTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7c23b186b8ca9b5 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SolutionOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #20c358afd439799f — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SortAscendingOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a75106c33702c21 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SortDescendingOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b2de74a26d81980 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SoundFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ecf67c7582b5f11 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SoundOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d5403aed20697b9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SoundTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #98d10fd808108671 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SplitCellsOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d5e53fbf5b88952 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SpotifyFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b09790d04e9b214 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SpotifyOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b39a7e0a457b725 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/StarFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #860944e30af4cf4f — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/StarOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e18fc792ef935b18 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/StarTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b0ee01ae69e4ef2 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/StepBackwardFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d169df4b42ccfe8e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/StepBackwardOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8d29dbb1200d97c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/StepForwardFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f1515bd2bae6ef03 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/StepForwardOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #44a95ea60970c074 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/StockOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36da46b74e644d78 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/StopFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df09aa74c7ff63bc — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/StopOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fcc84a6d00857161 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/StopTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #143e13313e6a1ad0 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/StrikethroughOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #272ee05ea2830b02 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SubnodeOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #717c6c0bc6d6c919 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SunFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7cb7450c54e96cb1 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SunOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61fd509c90d1ed71 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SwapLeftOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #077998a338675673 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SwapOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d31c32d7c2c6820c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SwapRightOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #66ee9c8ccb622a44 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SwitcherFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61aa9e53c1c21a9a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SwitcherOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #52ee1c00018c3835 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SwitcherTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97861beafd5411b4 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/SyncOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f0b04435f63d960 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TableOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f2e11f5292d8d731 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TabletFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d144744aa589dee2 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TabletOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb688d8a9e5665f8 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TabletTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #29b7787dc75749be — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TagFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47bf7b4227d87ef7 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TagOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c8e4fe306ad99efa — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TagTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #148321907356e7ab — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TagsFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #52789d5893cae739 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TagsOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62504c4fbb6cab89 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TagsTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ea7cdcc8d7c6e4b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TaobaoCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cffa731c810eb89a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TaobaoCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aa9f043a2c205b9e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TaobaoOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #12d7596e9346038c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TaobaoSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dfff0bac55da11d1 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TeamOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e06aa951dc954d4c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TelegramFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2bd225315c4eabf6 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ThreadsFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a82d5009bb847da — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ThunderboltFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #22cd68735457f4e3 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ThunderboltOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #269734aaa8a05b0c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ThunderboltTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1636ed917b6a3a3 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TikTokFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a13794b8f1ac9d47 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TikTokOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4479b7502b87a759 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ToTopOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eda0cd03dc8f4faf — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ToolFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9218395d1f56f9c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ToolOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e464f47a81244fbe — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ToolTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #676593ba68171260 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TrademarkCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9231c4a65c0536f8 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TrademarkCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9273457c041d6c57 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TrademarkCircleTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #72fc05e8ddd17dd5 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TrademarkOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a96dc8f6aa661e9e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TransactionOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a153ceb478b11eb — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TranslationOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #13e6730f77feb92f — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TrophyFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b0ec5c78cc549a3 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TrophyOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58640a65479c23da — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TrophyTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f8659308c5ab91e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TruckFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3bb58e28ed22d009 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TruckOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #86d9acd35775c3b3 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TwitchFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ae762ad34f912514 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TwitchOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #00685ecc0ee58bc8 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TwitterCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #625574abe63936e4 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TwitterOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #73fd76c9a4c6a422 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/TwitterSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9bd7bcaaa1211f0 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/UnderlineOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf95a1a2ee675dd9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/UndoOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #351a8a9a5dbf93af — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/UngroupOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ad8784249474a0b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/UnlockFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e2f21ed57eda967b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/UnlockOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec043b67efd4821f — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/UnlockTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a3a7162f5c05f36f — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/UnorderedListOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1cbffb5b7351082c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/UpCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #048b49701f672cf0 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/UpCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef1760cebfbcf32a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/UpCircleTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #667d6452bb887e8e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/UpOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9608deac989af4e5 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/UpSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef0e7fe7bcbb0f9d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/UpSquareOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #04a11613e7c0bb4b — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/UpSquareTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eddb1562a391a7e3 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/UploadOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a5713f5d1b10c7bb — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/UsbFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5cdeb3a57ff9be74 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/UsbOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2464b4fcfc0cf7dd — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/UsbTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1bcb731ff80636d1 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/UserAddOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76cc742b28286f0a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/UserDeleteOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c09037e73f33c986 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/UserOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d04a374ab59bc02 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/UserSwitchOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #79078dd4ff16795c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/UsergroupAddOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7fada823045a2934 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/UsergroupDeleteOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9112b823525eb431 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/VerifiedOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a165b6db6cbb147a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/VerticalAlignBottomOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bf3d3379409e3dbf — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/VerticalAlignMiddleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #94108e8d09dddcc2 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/VerticalAlignTopOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3614056caf5abbfb — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/VerticalLeftOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b650901884955d6c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/VerticalRightOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #20569321a990b3df — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/VideoCameraAddOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85bda6253c427dff — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/VideoCameraFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e279bbedf2057fe — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/VideoCameraOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #12affd7cae6b2f95 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/VideoCameraTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f780990d7c50bc9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/WalletFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3be6d296ee466e27 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/WalletOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e166fd19b49934c — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/WalletTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ed56656bd8a1974 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/WarningFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #392afb7b2bed7f3a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/WarningOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea2b05c23251f27e — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/WarningTwoTone.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c70ec9132ea8cef — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/WechatFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f6f05b57a7d1ce9 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/WechatOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9d2b5c73d1939ef — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/WechatWorkFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #939a2316f83a1109 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/WechatWorkOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d4de2140ba685578 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/WeiboCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5403b9fc9ac19666 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/WeiboCircleOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e6340a93bcbbfa4 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/WeiboOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3fa1085d2276c09 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/WeiboSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #021eae3f7f670fc4 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/WeiboSquareOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #15969d58dcbaf4b0 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/WhatsAppOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #68cf5a3d76a416b3 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/WifiOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b53995e374bba37 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/WindowsFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7c6fb3168c3584d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/WindowsOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d22b5b2f55742724 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/WomanOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #026b0e5d9867f6b1 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/XFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d33d6b15a747b7f0 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/XOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2412de0d3b38ca6d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/YahooFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49c4d884a4e3b908 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/YahooOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2171c339635cdc9f — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/YoutubeFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b34d67831525c78 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/YoutubeOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a889a3137dfefcb7 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/YuqueFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3122ef9945856867 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/YuqueOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b07c323c227013d — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ZhihuCircleFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5cfe0f9f92ce81b0 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ZhihuOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e7287f7b00b6144 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ZhihuSquareFilled.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7115cfcad8eaf49a — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ZoomInOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ba18e790aec55b8 — Environment-variable access.

pkgs/npm/@[email protected]/es/icons/ZoomOutOutlined.js:15

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d2c658d8ece0c74 — Environment-variable access.

pkgs/npm/@[email protected]/lib/components/AntdIcon.js:73

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d52def443bf5158a — Environment-variable access.

pkgs/npm/@[email protected]/lib/components/AntdIconLight.js:59

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #42dadb4000105799 — Environment-variable access.

pkgs/npm/@[email protected]/lib/components/Icon.js:87

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a51e6e6561d0787 — Environment-variable access.

pkgs/npm/@[email protected]/lib/cssUtils.js:158

  if (process.env.NODE_ENV !== 'production' && typeof console !== 'undefined') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ab8df5b57f847bd — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AccountBookFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa4cf63c31670579 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AccountBookOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #346defc1b8c9c3c5 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AccountBookTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a5af9f640ef8c59 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AimOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f5bfe71bed91ec9f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AlertFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53ee90e33a7c11d8 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AlertOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5820c40923a83c50 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AlertTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c9942cce8cbc766f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AlibabaOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea46cb808d594c07 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AlignCenterOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ae3f0387a6cc1db — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AlignLeftOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1be501ead28f1324 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AlignRightOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1da51b9119e5d8f2 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AlipayCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cee23f780006a4dd — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AlipayCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a54751d0a6716174 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AlipayOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4cf4680449ecfd01 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AlipaySquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c0b1ed0a96a7b93 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AliwangwangFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #69e3580744928777 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AliwangwangOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4e6dbfee934818cb — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AliyunOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #94c2cf393a2b93e6 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AmazonCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b719715cd92fad7f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AmazonOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b7750872a5cbce5 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AmazonSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #debd40f50879ca45 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AndroidFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d85928ebc59fa421 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AndroidOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a9ec754c0aa1bf6 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AntCloudOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ab7a975f3a99a14 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AntDesignOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #06f9351c74bd0d9f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AnthropicFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50f098ce76e514d9 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ApartmentOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee5db9868bacf0a2 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ApiFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b4fd3434ed320753 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ApiOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #edd50256063b65fe — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ApiTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9f2a0768468fed4b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AppleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #39d1eefecd04bd0a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AppleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0e0b073ecf829c5 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AppstoreAddOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #633c78319e14fd3f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AppstoreFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be73aa6c2aaddb0a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AppstoreOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #447ac5dc796ba9d5 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AppstoreTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #543e061bad198624 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AreaChartOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bdbaee79e96b6158 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ArrowDownOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #07d120f0360b248c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ArrowLeftOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e70b466851d946e9 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ArrowRightOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f5557b3ab9740d5 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ArrowUpOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c45b1d3d55a57a5f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ArrowsAltOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e9b1fcef7aba5b9 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AudioFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #879a04126c365268 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AudioMutedOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ce3a97c8750e089 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AudioOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #023d28e1bf22b1c8 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AudioTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #65e7fa1eef18cbc0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/AuditOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b992773cb364fd2 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BackwardFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #527e4ef7b7bb080d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BackwardOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b923c64851acbaa0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BaiduOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c536c58c97d12e1d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BankFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f20369fb9e1d78d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BankOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6055f8718a85b23 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BankTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36ce0d45e952cca8 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BarChartOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #92997a7008004153 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BarcodeOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f7f6b4ccce4e69ef — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BarsOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d99a37f22688280 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BehanceCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a399c35c4d4b0fb9 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BehanceOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee06f4e3a2a421e8 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BehanceSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76e4dee7e35b6248 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BehanceSquareOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ce78f347ce3518ca — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BellFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #832f7de19094c416 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BellOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af5bd29dcc9c60c5 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BellTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46bf68c9a347c6f2 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BgColorsOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e2824975469cecf — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BilibiliFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6f4a603564212b5 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BilibiliOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b4db3b2fadd2239 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BlockOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d74c914c0ec9829 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BoldOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e27d2ec6ddd77ec — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BookFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5537378507cf931e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BookOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #89ff59521652bc2d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BookTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6265a5b14db9383b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BorderBottomOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b534d641fbc7d80c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BorderHorizontalOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8df0894ba30c5966 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BorderInnerOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #292bdd7e239bf2e3 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BorderLeftOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85e8a4a4351e452a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BorderOuterOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #efe1bc48e9e8f3c0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BorderOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af67740fe966f91f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BorderRightOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9735835a4b6f919 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BorderTopOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #66fffb31fbef4a89 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BorderVerticleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f76143412e689bf — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BorderlessTableOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e558d68174e42aec — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BoxPlotFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd98bf3eecf2a6fa — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BoxPlotOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80cbb10e7ec6ac7e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BoxPlotTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #39f5ecf69961380e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BranchesOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb8bb073dcd399be — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BugFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #465a188a7ce94108 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BugOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0de82c055d3c3258 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BugTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d6939d0533f56094 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BuildFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36d278d642d21406 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BuildOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e853215ac439351 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BuildTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f477c9958dcf415 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BulbFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6045095c3344aaaa — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BulbOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2afa081ab7d88e7b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/BulbTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #632974255ff462c2 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CalculatorFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #26eb626b08c6aff6 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CalculatorOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b6ac6ee286a4628 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CalculatorTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #07d766f89667d7fa — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CalendarFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #517f21b97b280b8c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CalendarOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f27ce52925338a42 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CalendarTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f4f3e7453883a1e4 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CameraFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9bfa4d81d07b1126 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CameraOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #15fda227b263b616 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CameraTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #54e4f62995212308 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CarFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #400f2c5c7192dc66 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CarOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #64e1ddc931d1a427 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CarTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #04a7265e2ca14ab9 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CaretDownFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ec6c39a33ead7fb — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CaretDownOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d952d51ae99c758f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CaretLeftFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b91a3326515f45e5 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CaretLeftOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e0ac2aef1068ab59 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CaretRightFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb7660978955c81e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CaretRightOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc1d792c705d9e25 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CaretUpFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ffd120d66c3f92d1 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CaretUpOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7d479876de5b02fc — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CarryOutFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #578341299f406a61 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CarryOutOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3dac9e3a1b1b48bd — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CarryOutTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d704d7df92a806d1 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CheckCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e328b8358dfc180 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CheckCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ac3b6607d35cd2f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CheckCircleTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #553fdffb931ba5fd — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CheckOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #220ecfe01ed270fb — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CheckSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #373401d008986a5b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CheckSquareOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5b6cd01f64f59359 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CheckSquareTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e3f78793a19ecee — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ChromeFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb1d729b2d9014ce — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ChromeOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f21244e11335b9f4 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CiCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #16343c7658e9f473 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CiCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d1f40f59d7d4058 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CiCircleTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e66495814c7fc93 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CiOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3a956991191d4fe — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CiTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fabbc86ed2020aa7 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ClaudeFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d203b2808e971566 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ClearOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed4ec1879b6b7b6d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ClockCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f743a5b79c741ce2 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ClockCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed4a339e417b5c6e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ClockCircleTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #696546bc82071d45 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CloseCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #35c0a410b1958624 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CloseCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d85f4c6aa801d166 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CloseCircleTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf433f031c5e99cb — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CloseOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #96e5b792a9be78b2 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CloseSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8fe889a4a8be29d3 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CloseSquareOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c449d42d1e27066 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CloseSquareTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb9a27de3367463a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CloudDownloadOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #058a248f9ad8c3df — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CloudFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d47e88aa7d31e69d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CloudOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f27375e13dd684a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CloudServerOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e59325f27736b797 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CloudSyncOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be16d5a7aceb8c14 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CloudTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e5d02681fa99378d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CloudUploadOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c6576ac733457b6e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ClusterOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ccd463826e24ae87 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CodeFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80e64954e5068c2f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CodeOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f27ed7a230f8e4a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CodeSandboxCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d06337de35d5006 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CodeSandboxOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #934944c3329c5059 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CodeSandboxSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6dfa0a70fc3ace38 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CodeTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf8ff483727a2fd2 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CodepenCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a596023dbff3b862 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CodepenCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7d1708e35e3b2f90 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CodepenOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5aa06a260f0640cf — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CodepenSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #229c48d057054059 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CoffeeOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #69690e4d3de96f1a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ColumnHeightOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47ba92cd40d9ef51 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ColumnWidthOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58e47005aaefacf0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CommentOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b17d0c315d07fee5 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CompassFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c78b65014946376d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CompassOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f65b5e866361cbf — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CompassTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51d880e6988f5b3e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CompressOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c53a7018ff3b821d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ConsoleSqlOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c20c2e0073a3136c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ContactsFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ad9763868c41e1bd — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ContactsOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f1718c6b75b2f160 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ContactsTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8763ebf560685a67 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ContainerFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af94792ff6e6c26f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ContainerOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #15811c1e7a424c9b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ContainerTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ca38c57b36809c6 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ControlFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ec64740d6261625 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ControlOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe9ee5bdb1c2dd09 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ControlTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e29c3678efdeca3 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CopyFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #77c4b893d800bc6f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CopyOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b90ac5c7222a562 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CopyTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b95f43adf12d5889 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CopyrightCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bec487e7a7d9c108 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CopyrightCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97294874ee13e781 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CopyrightCircleTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a3db21f65c65c4ac — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CopyrightOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c145d15df29f7942 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CopyrightTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #70bc8ab7759180a0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CreditCardFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #714175c8382f7d73 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CreditCardOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61e7caa53064f1b5 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CreditCardTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #74b7f32de1aba979 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CrownFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #608a90684b15deb0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CrownOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a54349aa5685185d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CrownTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6959cbd64032604c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CustomerServiceFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c66def636856e7ee — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CustomerServiceOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7bb304cc1785ac04 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/CustomerServiceTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0332414799b9e8fa — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DashOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e2fe3d6c1fc597e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DashboardFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e538048dbde1cfcf — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DashboardOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6577c87ba25485a1 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DashboardTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d45a7167adf6079 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DatabaseFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9965a250e7fd7424 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DatabaseOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a1e0879b4259ae0e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DatabaseTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd29ec592ba566b9 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DeepSeekFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd3ff2c36b53b15c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DeleteColumnOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #123a85145676db74 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DeleteFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #299f9082ba088abd — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DeleteOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a6e9d471ab62872 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DeleteRowOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a920f528df19ee4 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DeleteTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51a424e55298076e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DeliveredProcedureOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0eb0596bdc7fa73 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DeploymentUnitOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2cb55d262c5dd049 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DesktopOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e1b710a6a9dd5fbf — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DiffFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7668359d4b59204 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DiffOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51a108d04b583f8b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DiffTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #65ee0c119359709d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DingdingOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6849060fd30c8fd — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DingtalkCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b4dc6de03e01c3b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DingtalkOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f861d928b67194a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DingtalkSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d126bdfe12db1049 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DisconnectOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fc9c12e1f4c4d27b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DiscordFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d27081e6a20d99ce — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DiscordOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f4e1d9be9b9cd07 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DislikeFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #98419ae45b4a4726 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DislikeOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c31964998cbfcb1a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DislikeTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a2c1a830dbdef9b8 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DockerOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #740133b0a2d20a8b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DollarCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f10fc2d23b38e176 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DollarCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b287b90c3bdf596e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DollarCircleTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #05867678014bab7a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DollarOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ebef77d1d4cfc5b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DollarTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cfb5c928542715a6 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DotChartOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3fb974304d4afe2a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DotNetOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f8c1efe6221c1c3b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DoubleLeftOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47b870e682c0a447 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DoubleRightOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc977159e3c0ec49 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DownCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f44a85020ada7c4d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DownCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #269817ae395b8930 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DownCircleTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #44a62b0205e4aa7e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DownOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a615cbe2bf4833bc — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DownSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3403b0507df45124 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DownSquareOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cff7f6118d35d835 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DownSquareTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #656103e0ae50567e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DownloadOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fcca15087b5956f5 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DragOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb3231483279cb02 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DribbbleCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e5f0185b947885c9 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DribbbleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a1fc27e399d31962 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DribbbleSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #74dcc6384c5178de — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DribbbleSquareOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef901b086cebc07d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DropboxCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c4b8169685ac3a59 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DropboxOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b70d6540d3a20dec — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/DropboxSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #742c18ad07e2fcd1 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/EditFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f3ac67051869b5ea — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/EditOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #037c01713babb16f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/EditTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7376255e4ffc08a5 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ElevenLabsFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32e1cdd875cf4acd — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/EllipsisOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f219a970f86eabc — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/EnterOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b284deb503d40ff — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/EnvironmentFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85c5f81fa3fe7dc1 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/EnvironmentOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6bdfb74c3d01faa8 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/EnvironmentTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aa14a34ee7d38f32 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/EuroCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d4ac62f544ce3805 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/EuroCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d44034360ca62354 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/EuroCircleTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f259795646ea3bc2 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/EuroOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ee37d062f29b539 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/EuroTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #19746a0c7952f2be — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ExceptionOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f52203b2ff5d65ca — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ExclamationCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e0126caacc6ecb1 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ExclamationCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be4e4a34c656e950 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ExclamationCircleTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f933251a86b23fd — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ExclamationOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #774d99bce0acb806 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ExpandAltOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #22cbbbc08e8b27cd — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ExpandOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc9f81640fecd77b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ExperimentFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #faeae36932a1e477 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ExperimentOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6c3e3664f75bb6a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ExperimentTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #21f92976c52b327f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ExportOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e1cbd7fb374f5ec0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/EyeFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b624fc67f96ba1da — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/EyeInvisibleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d48efc7d349a806b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/EyeInvisibleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62ed28db7c0e924f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/EyeInvisibleTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f42efce1ce55bfe3 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/EyeOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #33235c1c4844d150 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/EyeTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0917acce74a356b5 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FacebookFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4dc9c31c99684fc0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FacebookOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #130d94c9e8bfbd0e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FallOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b5f7c9cbf9c5d373 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FastBackwardFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d119ad1b184f75a5 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FastBackwardOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a31f241b2e4781c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FastForwardFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2056892ab4d6b7a6 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FastForwardOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb945d43f8dc9783 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FieldBinaryOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #35dc64ca34573511 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FieldNumberOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d7a8894f5aec645 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FieldStringOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d224c3642c99de6 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FieldTimeOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bf5a95fce0fc5fa1 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileAddFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5aff9a30d1e4501c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileAddOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c722ff93f089903a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileAddTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bf923a1c69d7514b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileDoneOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d315e19b15cbd46 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileExcelFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4fd152acdf826539 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileExcelOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2579e38dcf47f10a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileExcelTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9127a1c7e7abb000 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileExclamationFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #579fc568e0034bad — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileExclamationOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c67bcea26c61e775 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileExclamationTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba29cf4f6f68df32 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0438ee1dcd4ab1e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileGifOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #682baa4310a7aba4 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileImageFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5427823e82c43c75 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileImageOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c601f3662c0e6020 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileImageTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a95a36a11a912f0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileJpgOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #acd6072994e3a196 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileMarkdownFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0da60292a52ed051 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileMarkdownOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ce4cef9a0b55867 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileMarkdownTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f1153889406db24f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #de7b23ec592ef4ac — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FilePdfFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe5634f1cd1b1823 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FilePdfOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4813faea7773f021 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FilePdfTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #978f312f5a22a513 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FilePptFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50bfdfb1b3fed069 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FilePptOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #014d73dfb1f70542 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FilePptTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5cd39238a6bef869 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileProtectOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f37c9a031edd97c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileSearchOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #857e4822756b5aad — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileSyncOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ba047f66fec2936 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileTextFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #400919606eeacbd3 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileTextOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a93544e12ab66532 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileTextTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f1b4a69917a064d9 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8ec3cb0ed21d1ed — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileUnknownFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5dbb5fcad627cdd3 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileUnknownOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37a14e2592a83f25 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileUnknownTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #86b5521a477cbc2a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileWordFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c06c2ae30402f45 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileWordOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a3029aeed6e8f20b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileWordTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af0312c881e82210 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileZipFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d35c78ac86bce23f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileZipOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d4160c634913ff35 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FileZipTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dafb67c677dea43b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FilterFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fba6f3b55f555327 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FilterOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #27045ac924fef952 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FilterTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ddeee2712a8fbf74 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FireFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #363804671ba86fea — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FireOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb6553eba4a51577 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FireTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b4618b86062825be — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FlagFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #05cb2c5e8c6365b6 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FlagOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2693f41aedeb65d9 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FlagTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #44bfa8b632a34653 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FolderAddFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1302e9145f91351a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FolderAddOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bda5697003868d49 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FolderAddTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ce11d383a515442f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FolderFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #391b90793b2fda26 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FolderOpenFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #20de875524f3b633 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FolderOpenOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fc80c2bcb17fb7cd — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FolderOpenTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4cbfdf25e229aeb1 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FolderOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5051637e47b4ecc0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FolderTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #022b0a6fa58c668f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FolderViewOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0385ffeb49d09808 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FontColorsOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c1f436e220119818 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FontSizeOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #81eed8b3d90e4ec8 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ForkOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #546a256ac212add6 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FormOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da96d7f7164a335a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FormatPainterFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1fdf27bf110b6c05 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FormatPainterOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e3211e68a0955054 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ForwardFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0e10ac5b6363c7c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ForwardOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #162c6c6d5c2beb64 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FrownFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08d9f3b8b6110bdd — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FrownOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #77cb5baba1bc073b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FrownTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e92fd546ec69cf6 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FullscreenExitOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1dbf8af8305979f4 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FullscreenOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #00baabb36be8a6cb — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FunctionOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da7ffb2830849534 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FundFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc3eac380a228bd4 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FundOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #103074e8317d7805 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FundProjectionScreenOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eabe5a61dcf0eb95 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FundTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b9962870363d030 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FundViewOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5caac7722aee3f79 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FunnelPlotFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #30dcfdc15f28be68 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FunnelPlotOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #44dca87dc15d19dc — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/FunnelPlotTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #446a83242123ff20 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/GatewayOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3572b5884f785a0a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/GeminiFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5683dece97db608c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/GifOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ed431eeb8dded9a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/GiftFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #538ec63858519cb7 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/GiftOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #399bb2ae1fd86a6e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/GiftTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #477d07b9d507ac68 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/GithubFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c33c426ad32b096e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/GithubOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e22333afa4042ee8 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/GitlabFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba9d29d93ce27bdd — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/GitlabOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1bcecd565f0e3b52 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/GlobalOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a5a941146dd07f6 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/GoldFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa3a62bd55230c3e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/GoldOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #943520a4de01f43d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/GoldTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b469eb4e58aea0fc — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/GoldenFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c1907a656ac5d850 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/GoogleCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9275cf79f9e35b10 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/GoogleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #455cb10efaf0989c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/GooglePlusCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a0d2ff6afeb2ac3 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/GooglePlusOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7dc2063d29d77d94 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/GooglePlusSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #06c5a0d832aa2162 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/GoogleSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d95df10650203f7f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/GroupOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b239f13be9e9697 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/HarmonyOSOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dfa82f48137ae9fb — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/HddFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c45de80b265cfe7 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/HddOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #38282f8986cbbf17 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/HddTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e144dec4d275cc93 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/HeartFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b4c2a5e9a35a1d02 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/HeartOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61c096bf9a457a1d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/HeartTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #92eb7800442b1e8f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/HeatMapOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b78a2dbb073ee37 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/HighlightFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1bff319d9d0915b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/HighlightOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6df791971aa0db68 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/HighlightTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c095932a027a421 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/HistoryOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a0bee76ef491f0fe — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/HolderOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61726154510b2e87 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/HomeFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dbfc1d52040dcdce — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/HomeOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f3fb216b49b5eb2 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/HomeTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #87e14992fc0a02b2 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/HourglassFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6740e52e82f17761 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/HourglassOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f63dcf11cd7325b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/HourglassTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #64e7635203be71d4 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/Html5Filled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7420141bc993eb4b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/Html5Outlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #65ea6e084af51e68 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/Html5TwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b447fecd239def24 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/HuggingFaceFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cfc20293ff110435 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/IdcardFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #87f633607afe9d38 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/IdcardOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e0abcec72b7fc19 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/IdcardTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af61e4e5beaa246d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/IeCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2447e653ada2d704 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/IeOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #583b11b21c7f0308 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/IeSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34938fc93510ebf9 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ImportOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #331a10c8f794c9c3 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/InboxOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c9ff5280f8ccf49b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/InfoCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9ff09c60e4b57f3 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/InfoCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e8e14049ff1b22c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/InfoCircleTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc56d628c442e50d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/InfoOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #073163bdb15c2f7a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/InsertRowAboveOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a141e95d03c88721 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/InsertRowBelowOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe68881a9bb85039 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/InsertRowLeftOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e70c2026135e0a3 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/InsertRowRightOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8f75ce35fba6be4 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/InstagramFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f3fda7ef5c515db — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/InstagramOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2240d51f4125a074 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/InsuranceFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #21588ea65a366e0d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/InsuranceOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c97116cc6c09aeca — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/InsuranceTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a5ff632c1ae52e0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/InteractionFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #016051cb7a8da9c6 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/InteractionOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f3e7086795a63a0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/InteractionTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8a53fd31f957dd2 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/IssuesCloseOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ebbca78084d4212a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ItalicOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c8ac73ce8b9f6fa — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/JavaOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #83cc342d75eea972 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/JavaScriptOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b9e234a835856b9 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/KeyOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d76e846e95cf5deb — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/KubernetesOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f8612df22a90a847 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LaptopOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ea4156bae0fed0c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LayoutFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bf1496fabca1b00d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LayoutOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ba84f732bd7c675 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LayoutTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f5f42cf264b9197b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LeftCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c1812defee17df73 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LeftCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9871dec2b69e7491 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LeftCircleTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #31d922da95de3542 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LeftOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3292b49065a0302 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LeftSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24359e7c5b6bca58 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LeftSquareOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fdd07bcd28d98c73 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LeftSquareTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc8a6778d1849311 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LikeFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #260dbb92b9a17686 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LikeOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7564e1b2bd52251b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LikeTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2884d8c99946adf — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LineChartOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #301d94f7cdff6ce6 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LineHeightOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #93d9c6a3f160b76b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LineOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9a6593304502594 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LinkOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1e5afe84091249b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LinkedinFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f0d69276dd9a93d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LinkedinOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3d549253e79dd62 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LinuxOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d20cf1aa27fef0ce — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/Loading3QuartersOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f4a90396f66fd68 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LoadingOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bfe8c9e14e50305d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LockFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #556ff4aa04acb4be — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LockOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d303c948b17d699 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LockTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6017be9fc72c2ffc — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LoginOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #959422a643dbea05 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/LogoutOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8fa08fb91105ac46 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MacCommandFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5357a1f99c096e53 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MacCommandOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #98abb104dd2ddcca — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MailFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #285e9fd36a06c34c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MailOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #65f8c24ee0156234 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MailTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c02c6a04b5b4628e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ManOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #94c8b33a27ae54f7 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MastodonFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9dfdad02bdd2bca0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MedicineBoxFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49f62d810cd99053 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MedicineBoxOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb0aee04a43ae70f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MedicineBoxTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9feef4b912da569c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MediumCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #66c96dc1cb50ba8e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MediumOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47d17aaaede74cab — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MediumSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #74eb88f6cd26a435 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MediumWorkmarkOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9382c7cbb1cf4bb — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MehFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24b4041d0337a670 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MehOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9fbb1200f435c957 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MehTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eaf7ffe164f7890b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MenuFoldOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed62fa32e6551428 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MenuOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #30e1326b8db1cca0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MenuUnfoldOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #265903c1198cb4d8 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MergeCellsOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d0b8395783bf135 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MergeFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ae17c4554ea1d4d7 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MergeOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a56c6789aaad99e1 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MessageFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ce33277ddb031f5 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MessageOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7406e9e5bbec4615 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MessageTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b19bbdcbcbd0f58a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MinusCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a7539daad06cfc7 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MinusCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef4b28d26b4732b7 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MinusCircleTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e588cdf8cbdee026 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MinusOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #146e48fcbc930c3d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MinusSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3545a118bb55d714 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MinusSquareOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8b22839c300371b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MinusSquareTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e638e1f74292358 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MistralFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ea55fe6d43fa610 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MobileFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc5ce635922d4bf7 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MobileOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ef4b6d1d2121a02 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MobileTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c5a9664d1df5603c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MoneyCollectFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #33db614d8220bd1c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MoneyCollectOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1aabced2a89627e1 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MoneyCollectTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d00c07ad1ad04d7 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MonitorOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d518526be4739483 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MoonFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ea22c6a37e81e36 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MoonOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #281d3e4486171ece — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MoreOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ce0172257a8cbdb0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MutedFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f611a90dda14d210 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/MutedOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6a88ebfd8c94660 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/NodeCollapseOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ffdc5e7fe986532d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/NodeExpandOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #361774b873d40ce7 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/NodeIndexOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e09e2be3b49f6be — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/NotificationFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9cd60f5af54cd1fb — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/NotificationOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4394ced54c2bafb5 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/NotificationTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90727a121bdcff02 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/NumberOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #05a22f85892b3554 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/OllamaFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b817a7389efad13a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/OneToOneOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e294dd3f43849ebe — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/OpenAIFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32f12affb682ff7c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/OpenAIOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #57c194457ff6e541 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/OrderedListOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f9742156b09a0e2 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PaperClipOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1cc90f599f4ee630 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PartitionOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a4e7210261a3fb41 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PauseCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #983bc048b0bd25bf — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PauseCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a82b47088259343 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PauseCircleTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1121e09c1ab9d272 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PauseOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed4e6c1dbe3195eb — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PayCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a7d6ba93a2952fd — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PayCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e1be9620ad61e690 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PercentageOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #69a0a189631805e1 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PerplexityFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #23a6991dcefc62e2 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PhoneFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b6b72257dcd0484c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PhoneOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #017114d8e3cbed3d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PhoneTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50f0fa1baefc5f2c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PicCenterOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b86e939461ec6e23 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PicLeftOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e0fb1509474e638 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PicRightOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3bc9659df5e52f03 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PictureFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #870227770d68fdcd — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PictureOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #04dad99f3c923d4b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PictureTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b67566ebcd4c49f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PieChartFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d2535308b5449459 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PieChartOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c114b80ea1f3b103 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PieChartTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5bf8e9c4cdb014f8 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PinterestFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f95481c5c4e190a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PinterestOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #38da7c211f05845f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PlayCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5b3c264bc2f7906 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PlayCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6fed4d372f4d6df9 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PlayCircleTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #006f4115dcd1af7c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PlaySquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9780c857e91ebd07 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PlaySquareOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #596126e533236548 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PlaySquareTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bfe4684ba89baf7b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PlusCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aee6520b16a1b1b2 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PlusCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f06b49760e172c0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PlusCircleTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #169328a3ce74c401 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PlusOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1f147784a9b9ab0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PlusSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #849beb7d75258f86 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PlusSquareOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #707ebcd8842798f2 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PlusSquareTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #452c39348c6becb1 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PoundCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ddd74350000d8fa3 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PoundCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef55bbb514526c3c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PoundCircleTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #02f75689e3751289 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PoundOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1684485c4ac59cc4 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PoweroffOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa0462dabea09f1f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PrinterFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0fac822685394e32 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PrinterOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f93fc6d6c4f3363d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PrinterTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #825af757041a9eb1 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ProductFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #363190a9381dae67 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ProductOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34af325dfe917c21 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ProfileFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #21985133c3cb2684 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ProfileOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37d98bc522e34863 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ProfileTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58ab3a32c6d5ff77 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ProjectFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80c57295c2eaef7d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ProjectOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #921f98da56f4b79d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ProjectTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e29c0d9eb0a8506 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PropertySafetyFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #951df5e7058389a4 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PropertySafetyOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b76c96346d85ac30 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PropertySafetyTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a5c47661a579d87b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PullRequestOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea6c83bf55bed68f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PushpinFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6afcaa51af63dcfd — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PushpinOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #07a04a85e42d63e7 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PushpinTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b530266ce9bba166 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/PythonOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e1c9addc890b128 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/QqCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3570fecff4c2f615 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/QqOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d9d9e563b22631f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/QqSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ab18c4a1d981190 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/QrcodeOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7a038c0b47b62bbf — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/QuestionCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d628ff186a95c876 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/QuestionCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1435e72bd6bbfc1 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/QuestionCircleTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #632d0448be2b7244 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/QuestionOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8703a172a11a6ae — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/QwenFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e34d5d604cda648 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RadarChartOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c9cb3daa3fb02029 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RadiusBottomleftOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #536b872cebd1b7c3 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RadiusBottomrightOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9cc148018f7a197 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RadiusSettingOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a3b744eb6bdd4aa — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RadiusUpleftOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd66b63da2f88d42 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RadiusUprightOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #505bfa41169f5cf8 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ReadFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e10316206a1a5b2 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ReadOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4969f43f87266a49 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ReconciliationFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d4e2201b3cc1e89 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ReconciliationOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d86c9b7d2e6ce53b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ReconciliationTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9174783bb0351e09 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RedEnvelopeFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f3ead3dc7d3a8d5 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RedEnvelopeOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40aaa6382f56f75b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RedEnvelopeTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4635940a83826d5c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RedditCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e33b003af60d15c8 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RedditOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec8f0e11556eaa77 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RedditSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #12564d16d5d9f6df — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RedoOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a021c0436120433a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ReloadOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e900826e187cd67 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ReplicateFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d01d34f0e0c12f7a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RestFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d38ece9882b4709 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RestOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4560ff0900701b01 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RestTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8ec099a5a0f8fcb — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RetweetOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c425d6d91bed3d1 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RightCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e889e767f14101c8 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RightCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #221dd8e07ea2d7e2 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RightCircleTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c6124f94670639a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RightOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #70a8673ece59c8f8 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RightSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #52555938734f68db — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RightSquareOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a71194f5b1c3719 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RightSquareTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f942347bab7d7aa — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RiseOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b81eaedb815c8c4 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RobotFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d3af227770a8e07f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RobotOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1735301e2b435ab8 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RocketFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bac0d383d75c3c58 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RocketOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9f8d7fd36fb6708 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RocketTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #772fa496d62999d6 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RollbackOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2fe82b74b98a3287 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RotateLeftOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dbf7e9fff9244eac — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RotateRightOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7935dfb8229f367 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/RubyOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7bab892c851ccb1 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SafetyCertificateFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ae95bdae9355bf46 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SafetyCertificateOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ae9a8821b7aeb03 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SafetyCertificateTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a4e3fa50bda9907 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SafetyOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ef25fa25d7a3073 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SaveFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #622756114f6eea26 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SaveOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4be7fb5beaa0e4ba — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SaveTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4adf7b4b8c17a223 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ScanOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b40fef236d1741d5 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ScheduleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a824d16d0a1de47 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ScheduleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d6b616887274095 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ScheduleTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b257e684499ff04e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ScissorOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f2e7944c4a69826 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SearchOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c4f74921070b9f8 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SecurityScanFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e6a1740053cf800 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SecurityScanOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3cfcddd2477dcf3a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SecurityScanTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ae64407c15a04ebd — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SelectOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61cff97ab48165f1 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SendOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9b84e89c495e907 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SettingFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e14652da9ce629f7 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SettingOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #991376b816a055df — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SettingTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c57d96029bec4bc0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ShakeOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47c6f2aeecec691d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ShareAltOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b854256f0eb765f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ShopFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b40ae1718eeda0f7 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ShopOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5cbe1e5116f8b5b2 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ShopTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd0f9f0064bbb558 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ShoppingCartOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d850d05ea3739942 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ShoppingFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d17598ac05fef06 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ShoppingOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7132d0ce6c63385f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ShoppingTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec58f9bd43e92265 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ShrinkOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #28a89126eff8daa4 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SignalFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d33756b780d2811 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SignatureFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #88e506be0e776143 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SignatureOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0bd08567a03365bb — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SisternodeOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #421ee4e8825e6ce7 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SketchCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #387b2dbdd0485447 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SketchOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c6a601c0b6a58dd — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SketchSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #782d09cd7bb007ee — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SkinFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f63c7fb0aa19bbc2 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SkinOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #65c00b7376871c8e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SkinTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a0ab1dadf1b7a3f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SkypeFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2a5004d4bf1d7c5 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SkypeOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #68e3ba162604d598 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SlackCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bee7f907248b2bb0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SlackOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ad3f073f9d0287d4 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SlackSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f0113e7839b2064 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SlackSquareOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3bdd291ba555a548 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SlidersFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #65f41bc0a201325b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SlidersOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #180b27707b99bdf3 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SlidersTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #38d6de8a9170eaa9 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SmallDashOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #99c33882a2ad540e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SmileFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a9e6b8f98b3d4d02 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SmileOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e188ce01fc0db23 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SmileTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a4ebbdd3d1b88790 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SnapchatFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #06e6fcee1b2f92e0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SnippetsFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50eceb95a6ed943b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SnippetsOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7498027e19840c9 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SnippetsTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2873631dab19d04 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SolutionOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b53d4d8ac2a9e17d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SortAscendingOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #643cf09460092398 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SortDescendingOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b43935673651c3dc — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SoundFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c1591df90713a422 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SoundOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4245110f9a6d4ec8 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SoundTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #022e25ff70790f25 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SplitCellsOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24ee77a4b071e034 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SpotifyFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #63c5068ca2b7a88d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SpotifyOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ddb5ad34fb58ce6e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/StarFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca2604906a161da1 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/StarOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #70e6948bd6e83744 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/StarTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #19e28a119af775be — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/StepBackwardFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90a94371667ed687 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/StepBackwardOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9428feb94a78591a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/StepForwardFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #816d45f88eff448a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/StepForwardOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e706acbe29ba7334 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/StockOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4236fd5f9393ed80 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/StopFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0955b05ff9051dde — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/StopOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fbf67c1bb21d75d0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/StopTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #82792c8ee74cf16b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/StrikethroughOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #07beeb87e6dede04 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SubnodeOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #585a622618a49ddf — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SunFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7df2180e0f07485f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SunOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #917ff3dc78880ca5 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SwapLeftOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b19edf09af6f60dc — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SwapOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #77963d3be7ee119d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SwapRightOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95d94d2f52025603 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SwitcherFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #04de10d3b9722436 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SwitcherOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4cea713512d3b1a4 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SwitcherTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f06fe9600fd75068 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/SyncOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f26e448f8868a380 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TableOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b6065acf2d43d33c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TabletFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd70f622f53bbdd4 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TabletOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a8c29aa43c56700 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TabletTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #42c37af19da0397b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TagFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #77681198ba4bd047 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TagOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #378142dead4070c3 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TagTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d6c604270f97775a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TagsFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84a2ff1b552f997f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TagsOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3205d3ced3fe73cc — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TagsTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fbaf66f484edbf2d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TaobaoCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd4c35f1cf75bdf4 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TaobaoCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c697224d4d1a69a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TaobaoOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f3800114b7b6437 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TaobaoSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f7f6752a4bdcf63c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TeamOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dffdbb8b22a7c87e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TelegramFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #538702026ad31a81 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ThreadsFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e96b07c53145562f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ThunderboltFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #69a29398067241c6 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ThunderboltOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b19bb29cfa0cd93a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ThunderboltTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #87c71fa2be5c32cb — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TikTokFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40025885873a2ee2 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TikTokOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c78689f008ebf23 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ToTopOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0a6a41e7817f3a9 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ToolFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7bc915ebc3095817 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ToolOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #87377efd1ad34eb9 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ToolTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #924fbb9b1a3a7dff — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TrademarkCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c1ded34b87ab761f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TrademarkCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #654ea2d07f6ad2b1 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TrademarkCircleTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cab7937cf49a5f53 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TrademarkOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b0792472663142c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TransactionOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #60e908c7d6232ca5 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TranslationOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #934e00b7812ab41b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TrophyFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80df8c25fa5991b6 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TrophyOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c40cfcb682f97ec0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TrophyTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7a3f87572f42838 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TruckFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4df07479469d2ec3 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TruckOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b3d8548f5283cfe — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TwitchFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ddb054ae43b01940 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TwitchOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c35fc512251856e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TwitterCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85457b288239caaf — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TwitterOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #27ff7eac1d14a9eb — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/TwitterSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #98f1773087a54275 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/UnderlineOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f3bab121c27fd235 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/UndoOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a13a00fb3c9a2596 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/UngroupOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb731eb7b0a21694 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/UnlockFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #06680f9afbf1ece0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/UnlockOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #312ddddb20a7df14 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/UnlockTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4971b71da14f4d57 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/UnorderedListOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab1ed47414a5bee9 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/UpCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bf3d57977b816a5d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/UpCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a0f5eb98d73f4298 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/UpCircleTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #79bcec19b95e571c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/UpOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2aad8e1ae7466352 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/UpSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c70f059b403eec95 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/UpSquareOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fef0184bd3afad70 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/UpSquareTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e321300bc980f053 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/UploadOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #223ea6bdf395e748 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/UsbFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10ec2f319ef0bfc6 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/UsbOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46083c98fdb03d54 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/UsbTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6421f7c67201902e — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/UserAddOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #de5a1514a85043b0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/UserDeleteOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #79f0875457c6e9be — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/UserOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #74925133b13512be — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/UserSwitchOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7ebb4e55d30927a8 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/UsergroupAddOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0ba512e5a23aa0a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/UsergroupDeleteOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc5a19d8821d718c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/VerifiedOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37b2d46c31bdfbdb — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/VerticalAlignBottomOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e28977c45f50180f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/VerticalAlignMiddleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b16477e01f4a337b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/VerticalAlignTopOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #965d9ed85f4ca59c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/VerticalLeftOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #20801e3fe4aafe1c — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/VerticalRightOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bf1704571f6781b8 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/VideoCameraAddOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe87bb2805472535 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/VideoCameraFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a919a517124f1c24 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/VideoCameraOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d46b9426548b5503 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/VideoCameraTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ac30028930e2f5d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/WalletFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a1f40ab3fc2df9e0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/WalletOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #019efdaa7ac2620d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/WalletTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ce7823fde43334f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/WarningFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5469191da40050b1 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/WarningOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #507d5fb0ec374784 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/WarningTwoTone.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f4ec6aec8114003 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/WechatFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3569a83fea7439e3 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/WechatOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b4ea909c775512b0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/WechatWorkFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9cde8cd07d2b45ef — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/WechatWorkOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f749ae0f30330874 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/WeiboCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1d164fa79849d43 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/WeiboCircleOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dca876520ef80882 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/WeiboOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e20d8e4db3b6d61 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/WeiboSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7ba043ca0eac5ce — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/WeiboSquareOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a6a3afdcb9ff00f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/WhatsAppOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bbb860f8a98362d8 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/WifiOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #001623e4ea2f276f — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/WindowsFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01288a33ee55f6fd — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/WindowsOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b778469056a053b — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/WomanOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #41598916309e9dd5 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/XFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #72f8225f2cd29007 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/XOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08250ff78971a628 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/YahooFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b6363b6d34a4721d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/YahooOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #788e77db47841809 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/YoutubeFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #31025ebd6295893d — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/YoutubeOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3fc72d3164c2213a — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/YuqueFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #889a707e5f10f0ca — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/YuqueOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49fdc0729a77b852 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ZhihuCircleFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d24876a0554f7276 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ZhihuOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca2e91df60ebeece — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ZhihuSquareFilled.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #987f9e25064e2b25 — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ZoomInOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0224bbae22cefbaf — Environment-variable access.

pkgs/npm/@[email protected]/lib/icons/ZoomOutOutlined.js:22

if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@anthropic-ai/sdk

npm dependency

expand_more 44 low-confidence finding(s)

low env_fs dependency Excluded from app score #9c072cdde1fae7a1 — Filesystem access.

pkgs/npm/@[email protected]/core/credentials.js:110

        configRaw = await fs.promises.readFile(configPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #89f71326f25cfa2c — Filesystem access.

pkgs/npm/@[email protected]/core/credentials.js:210

        raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #16bc26e5d12abd12 — Filesystem access.

pkgs/npm/@[email protected]/core/credentials.js:308

        return (await fs.promises.readFile(filePath, 'utf-8')).trim() || 'default';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dde5698aa25441a4 — Filesystem access.

pkgs/npm/@[email protected]/core/credentials.mjs:73

        configRaw = await fs.promises.readFile(configPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #924687f9fd2a0295 — Filesystem access.

pkgs/npm/@[email protected]/core/credentials.mjs:172

        raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d925a3157eeb4cfb — Filesystem access.

pkgs/npm/@[email protected]/core/credentials.mjs:268

        return (await fs.promises.readFile(filePath, 'utf-8')).trim() || 'default';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c92fe4fae293ebd2 — Filesystem access.

pkgs/npm/@[email protected]/lib/credentials/credential-chain.js:203

            const raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f1f0919399b38c36 — Filesystem access.

pkgs/npm/@[email protected]/lib/credentials/credential-chain.mjs:166

            const raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67d42ce801e7f7dc — Filesystem access.

pkgs/npm/@[email protected]/lib/credentials/identity-token.js:51

            content = await fs.promises.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f61bc1441dbc0f2 — Filesystem access.

pkgs/npm/@[email protected]/lib/credentials/identity-token.mjs:14

            content = await fs.promises.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ab0e8f70b4d41c6 — Filesystem access.

pkgs/npm/@[email protected]/lib/credentials/types.js:195

            await fh.writeFile(JSON.stringify(data, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d7cfcbdba56d75c5 — Filesystem access.

pkgs/npm/@[email protected]/lib/credentials/types.mjs:154

            await fh.writeFile(JSON.stringify(data, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fcd0d9ebb45047c0 — Filesystem access.

pkgs/npm/@[email protected]/lib/credentials/user-oauth.js:56

            raw = await fs.promises.readFile(config.credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #598f5bdb75e3bfd5 — Filesystem access.

pkgs/npm/@[email protected]/lib/credentials/user-oauth.mjs:20

            raw = await fs.promises.readFile(config.credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e5e231165c9e6d43 — Filesystem access.

pkgs/npm/@[email protected]/src/core/credentials.ts:154

    configRaw = await fs.promises.readFile(configPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf3b986deb1e8817 — Filesystem access.

pkgs/npm/@[email protected]/src/core/credentials.ts:258

    raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6d8f1471fd474f1 — Filesystem access.

pkgs/npm/@[email protected]/src/core/credentials.ts:372

    return (await fs.promises.readFile(filePath, 'utf-8')).trim() || 'default';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f934b3296072d11a — Filesystem access.

pkgs/npm/@[email protected]/src/lib/credentials/credential-chain.ts:250

      const raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #17db1ddffeb3904b — Filesystem access.

pkgs/npm/@[email protected]/src/lib/credentials/identity-token.ts:17

      content = await fs.promises.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c9a593406aa67ee9 — Filesystem access.

pkgs/npm/@[email protected]/src/lib/credentials/types.ts:222

      await fh.writeFile(JSON.stringify(data, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7baeac9d7f19bcd2 — Filesystem access.

pkgs/npm/@[email protected]/src/lib/credentials/user-oauth.ts:45

      raw = await fs.promises.readFile(config.credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d83b31217cfba712 — Filesystem access.

pkgs/npm/@[email protected]/src/tools/agent-toolset/fs-util.ts:112

    await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c1e1722ea565c1e8 — Filesystem access.

pkgs/npm/@[email protected]/src/tools/agent-toolset/node.ts:457

        data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #21ae60b8f5b6f8ed — Filesystem access.

pkgs/npm/@[email protected]/src/tools/agent-toolset/node.ts:533

        data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f6044d59bf35392d — Environment-variable access.

pkgs/npm/@[email protected]/src/tools/agent-toolset/node.ts:806

  const dirs = (process.env['PATH'] ?? '').split(path.delimiter);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1b16fdb4ac401f4e — Filesystem access.

pkgs/npm/@[email protected]/src/tools/memory/node.ts:4

import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7a81bef223806297 — Filesystem access.

pkgs/npm/@[email protected]/src/tools/memory/node.ts:52

    await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #db6ef8924aa00ea1 — Filesystem access.

pkgs/npm/@[email protected]/src/tools/memory/node.ts:101

    return await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #81df79016699fe4e — Filesystem access.

pkgs/npm/@[email protected]/src/tools/memory/node.ts:256

      await handle.writeFile(command.file_text, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6a0102b632fdeba9 — Filesystem access.

pkgs/npm/@[email protected]/tools/agent-toolset/fs-util.js:115

        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a58aae92122798b2 — Filesystem access.

pkgs/npm/@[email protected]/tools/agent-toolset/fs-util.mjs:107

        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bdc8087396b0829f — Filesystem access.

pkgs/npm/@[email protected]/tools/agent-toolset/node.js:390

                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9af9023e650ea1d1 — Filesystem access.

pkgs/npm/@[email protected]/tools/agent-toolset/node.js:469

                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #586c6118d5ef22d0 — Environment-variable access.

pkgs/npm/@[email protected]/tools/agent-toolset/node.js:755

    const dirs = (process.env['PATH'] ?? '').split(path.delimiter);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b5e8c0276876e362 — Filesystem access.

pkgs/npm/@[email protected]/tools/agent-toolset/node.mjs:375

                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #14749f7df231b841 — Filesystem access.

pkgs/npm/@[email protected]/tools/agent-toolset/node.mjs:454

                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3e743244646a8161 — Environment-variable access.

pkgs/npm/@[email protected]/tools/agent-toolset/node.mjs:740

    const dirs = (process.env['PATH'] ?? '').split(path.delimiter);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d1e3a9539ff500c4 — Filesystem access.

pkgs/npm/@[email protected]/tools/memory/node.js:43

        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a9f359b95c5b8ad1 — Filesystem access.

pkgs/npm/@[email protected]/tools/memory/node.js:91

        return await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0b02a54e2845d2e6 — Filesystem access.

pkgs/npm/@[email protected]/tools/memory/node.js:213

            await handle.writeFile(command.file_text, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9f2b010f867bac10 — Filesystem access.

pkgs/npm/@[email protected]/tools/memory/node.mjs:2

import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b6f53d6a0a197045 — Filesystem access.

pkgs/npm/@[email protected]/tools/memory/node.mjs:38

        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #79489eddde2837fa — Filesystem access.

pkgs/npm/@[email protected]/tools/memory/node.mjs:86

        return await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c53431396139ca21 — Filesystem access.

pkgs/npm/@[email protected]/tools/memory/node.mjs:208

            await handle.writeFile(command.file_text, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@azure-rest/ai-inference

npm dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #bafa6ae2c382170f — Environment-variable access.

pkgs/npm/@[email protected]__sourcemap/src/tracingHelper.ts:237

  const value = process.env[key] ?? process.env[key.toLowerCase()];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@cfworker/json-schema

npm dependency

expand_more 1 low-confidence finding(s)

low egress dependency Excluded from app score #eb24b566b624dd72 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/dereference.ts:75

    : new URL('https://github.com/cfworker');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@composio/core

npm dependency

expand_more 15 low-confidence finding(s)

low env_fs dependency Excluded from app score #1932ac6bc473e3e5 — Filesystem access.

pkgs/npm/@[email protected]/src/models/RemoteFile.ts:169

    platform.writeFileSync(savePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #714ad115bb53eb28 — Filesystem access.

pkgs/npm/@[email protected]/src/models/ToolRouterSessionFileMount.ts:135

      const content = platform.readFileSync(input);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #69f502c6395b1da7 — Filesystem access.

pkgs/npm/@[email protected]/src/platform/node.ts:47

      const buf = fs.readFileSync(filePath, { encoding: null });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34b219c29cb877ce — Filesystem access.

pkgs/npm/@[email protected]/src/platform/node.ts:52

    const str = fs.readFileSync(filePath, { encoding });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01b44296ed74bf0f — Filesystem access.

pkgs/npm/@[email protected]/src/platform/node.ts:62

      fs.writeFileSync(filePath, content, { encoding });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #13a3f1e641a53482 — Filesystem access.

pkgs/npm/@[email protected]/src/platform/node.ts:64

      fs.writeFileSync(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2014c5b7dfe1a60a — Environment-variable access.

pkgs/npm/@[email protected]/src/services/pusher/Pusher.ts:28

    this.apiKey = client.apiKey ?? process.env.COMPOSIO_API_KEY ?? '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #83dd10886a693a2c — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/services/telemetry/TelemetryService.ts:14

      const result = await fetch(`${TELEMETRY_URL}/metrics/invocations`, {
        method: 'POST',
        headers: {
          'Content-Type': 'application/json',
        },
        body: JSON.stringify(payload),
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9b4bbd11c80a7423 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/services/telemetry/TelemetryService.ts:35

      const result = await fetch(`${TELEMETRY_URL}/errors`, {
        method: 'POST',
        headers: {
          'Content-Type': 'application/json',
        },
        body: JSON.stringify(payload),
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #2fff96aabf9edbb6 — Environment-variable access.

pkgs/npm/@[email protected]/src/utils/env.ts:6

    return process.env[name] || defaultValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c41d1141895c8794 — Filesystem access.

pkgs/npm/@[email protected]/src/utils/fileUtils.node.ts:135

    const content = platform.readFileSync(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #496ee957d5bb6a92 — Filesystem access.

pkgs/npm/@[email protected]/src/utils/fileUtils.node.ts:448

      platform.writeFileSync(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aafd72479e010abc — Filesystem access.

pkgs/npm/@[email protected]/src/utils/fileUtils.node.ts:450

      platform.writeFileSync(filePath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d382188701d8907 — Filesystem access.

pkgs/npm/@[email protected]/src/utils/sdk.ts:34

    const data = platform.readFileSync(dataPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #d9e8bd2e66511901 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/utils/version.ts:46

    const response = await fetch(`https://registry.npmjs.org/${packageName}/latest`);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

Skipped dependencies

Production

@atlaskit/pragmatic-drag-and-drop prod — dist-only: no readable source
@better-auth/expo prod — dist-only: no readable source
@better-auth/passkey prod — dist-only: no readable source
@chat-adapter/discord prod — dist-only: no readable source
@chat-adapter/slack prod — dist-only: no readable source
@chat-adapter/state-ioredis prod — dist-only: no readable source
@chat-adapter/telegram prod — dist-only: no readable source
@floating-ui/react prod — scan budget exceeded
@formkit/auto-animate prod — scan budget exceeded
@google/genai prod — scan budget exceeded
@henrygd/queue prod — scan budget exceeded
@huggingface/inference prod — scan budget exceeded
@icons-pack/react-simple-icons prod — scan budget exceeded
@khmyznikov/pwa-install prod — scan budget exceeded
@larksuiteoapi/node-sdk prod — scan budget exceeded
@lexical/utils prod — scan budget exceeded
@lobechat/agent-gateway-client prod — scan budget exceeded
@lobechat/agent-mock prod — scan budget exceeded
@lobechat/agent-runtime prod — scan budget exceeded
@lobechat/agent-signal prod — scan budget exceeded
@lobechat/agent-templates prod — scan budget exceeded
@lobechat/artifact-template prod — scan budget exceeded
@lobechat/builtin-agents prod — scan budget exceeded
@lobechat/builtin-skills prod — scan budget exceeded
@lobechat/builtin-tool-activator prod — scan budget exceeded
@lobechat/builtin-tool-agent-builder prod — scan budget exceeded
@lobechat/builtin-tool-agent-documents prod — scan budget exceeded
@lobechat/builtin-tool-agent-management prod — scan budget exceeded
@lobechat/builtin-tool-agent-signal prod — scan budget exceeded
@lobechat/builtin-tool-brief prod — scan budget exceeded
@lobechat/builtin-tool-browser prod — scan budget exceeded
@lobechat/builtin-tool-calculator prod — scan budget exceeded
@lobechat/builtin-tool-claude-code prod — scan budget exceeded
@lobechat/builtin-tool-cloud-sandbox prod — scan budget exceeded
@lobechat/builtin-tool-creds prod — scan budget exceeded
@lobechat/builtin-tool-group-agent-builder prod — scan budget exceeded
@lobechat/builtin-tool-group-management prod — scan budget exceeded
@lobechat/builtin-tool-knowledge-base prod — scan budget exceeded
@lobechat/builtin-tool-lobe-agent prod — scan budget exceeded
@lobechat/builtin-tool-lobe-delivery-checker prod — scan budget exceeded
@lobechat/builtin-tool-local-system prod — scan budget exceeded
@lobechat/builtin-tool-memory prod — scan budget exceeded
@lobechat/builtin-tool-message prod — scan budget exceeded
@lobechat/builtin-tool-notebook prod — scan budget exceeded
@lobechat/builtin-tool-page-agent prod — scan budget exceeded
@lobechat/builtin-tool-remote-device prod — scan budget exceeded
@lobechat/builtin-tool-self-iteration prod — scan budget exceeded
@lobechat/builtin-tool-skill-maintainer prod — scan budget exceeded
@lobechat/builtin-tool-skill-store prod — scan budget exceeded
@lobechat/builtin-tool-skills prod — scan budget exceeded
@lobechat/builtin-tool-task prod — scan budget exceeded
@lobechat/builtin-tool-topic-reference prod — scan budget exceeded
@lobechat/builtin-tool-user-interaction prod — scan budget exceeded
@lobechat/builtin-tool-verify prod — scan budget exceeded
@lobechat/builtin-tool-web-browsing prod — scan budget exceeded
@lobechat/builtin-tool-web-onboarding prod — scan budget exceeded
@lobechat/builtin-tools prod — scan budget exceeded
@lobechat/business-config prod — scan budget exceeded
@lobechat/business-const prod — scan budget exceeded
@lobechat/business-model-bank prod — scan budget exceeded
@lobechat/business-model-runtime prod — scan budget exceeded
@lobechat/chat-adapter-feishu prod — scan budget exceeded
@lobechat/chat-adapter-imessage prod — scan budget exceeded
@lobechat/chat-adapter-line prod — scan budget exceeded
@lobechat/chat-adapter-qq prod — scan budget exceeded
@lobechat/chat-adapter-wechat prod — scan budget exceeded
@lobechat/config prod — scan budget exceeded
@lobechat/const prod — scan budget exceeded
@lobechat/context-engine prod — scan budget exceeded
@lobechat/conversation-flow prod — scan budget exceeded
@lobechat/database prod — scan budget exceeded
@lobechat/desktop-bridge prod — scan budget exceeded
@lobechat/device-gateway-client prod — scan budget exceeded
@lobechat/edge-config prod — scan budget exceeded
@lobechat/editor-runtime prod — scan budget exceeded
@lobechat/electron-client-ipc prod — scan budget exceeded
@lobechat/electron-server-ipc prod — scan budget exceeded
@lobechat/eval-dataset-parser prod — scan budget exceeded
@lobechat/eval-rubric prod — scan budget exceeded
@lobechat/fetch-sse prod — scan budget exceeded
@lobechat/file-loaders prod — scan budget exceeded
@lobechat/heterogeneous-agents prod — scan budget exceeded
@lobechat/llm-generation-tracing prod — scan budget exceeded
@lobechat/local-file-shell prod — scan budget exceeded
@lobechat/markdown-patch prod — scan budget exceeded
@lobechat/memory-user-memory prod — scan budget exceeded
@lobechat/model-runtime prod — scan budget exceeded
@lobechat/observability-otel prod — scan budget exceeded
@lobechat/openapi prod — scan budget exceeded
@lobechat/prompts prod — scan budget exceeded
@lobechat/python-interpreter prod — scan budget exceeded
@lobechat/shared-tool-ui prod — scan budget exceeded
@lobechat/ssrf-safe-fetch prod — scan budget exceeded
@lobechat/tool-runtime prod — scan budget exceeded
@lobechat/utils prod — scan budget exceeded
@lobechat/web-crawler prod — scan budget exceeded
@lobehub/analytics prod — scan budget exceeded
@lobehub/charts prod — scan budget exceeded
@lobehub/desktop-ipc-typings prod — scan budget exceeded
@lobehub/editor prod — scan budget exceeded
@lobehub/icons prod — scan budget exceeded
@lobehub/market-sdk prod — scan budget exceeded
@lobehub/tts prod — scan budget exceeded
@lobehub/ui prod — scan budget exceeded
@modelcontextprotocol/sdk prod — scan budget exceeded
@napi-rs/canvas prod — scan budget exceeded
@neondatabase/serverless prod — scan budget exceeded
@next/third-parties prod — scan budget exceeded
@opentelemetry/auto-instrumentations-node prod — scan budget exceeded
@opentelemetry/exporter-jaeger prod — scan budget exceeded
@opentelemetry/resources prod — scan budget exceeded
@opentelemetry/sdk-metrics prod — scan budget exceeded
@opentelemetry/winston-transport prod — scan budget exceeded
@pierre/trees prod — scan budget exceeded
@react-pdf/renderer prod — scan budget exceeded
@react-three/drei prod — scan budget exceeded
@react-three/fiber prod — scan budget exceeded
@saintno/comfyui-sdk prod — scan budget exceeded
@t3-oss/env-core prod — scan budget exceeded
@t3-oss/env-nextjs prod — scan budget exceeded
@tanstack/react-query prod — scan budget exceeded
@trpc/client prod — scan budget exceeded
@trpc/next prod — scan budget exceeded
@trpc/react-query prod — scan budget exceeded
@trpc/server prod — scan budget exceeded
@upstash/qstash prod — scan budget exceeded
@upstash/workflow prod — scan budget exceeded
@vercel/analytics prod — scan budget exceeded
@vercel/edge-config prod — scan budget exceeded
@vercel/functions prod — scan budget exceeded
@vercel/speed-insights prod — scan budget exceeded
@virtuoso.dev/masonry prod — scan budget exceeded
@xterm/addon-fit prod — scan budget exceeded
@xterm/xterm prod — scan budget exceeded
@zumer/snapdom prod — scan budget exceeded
ahooks prod — scan budget exceeded
antd prod — scan budget exceeded
antd-style prod — scan budget exceeded
async-retry prod — scan budget exceeded
bcryptjs prod — scan budget exceeded
better-auth prod — scan budget exceeded
brotli-wasm prod — scan budget exceeded
buffer.js prod — scan budget exceeded
chat prod — scan budget exceeded
chroma-js prod — scan budget exceeded
class-variance-authority prod — scan budget exceeded
cmdk prod — scan budget exceeded
cookie prod — scan budget exceeded
countries-and-timezones prod — scan budget exceeded
d3-dsv prod — scan budget exceeded
dayjs prod — scan budget exceeded
debug prod — scan budget exceeded
dexie prod — scan budget exceeded
diff prod — scan budget exceeded
discord-api-types prod — scan budget exceeded
drizzle-orm prod — scan budget exceeded
drizzle-zod prod — scan budget exceeded
epub2 prod — scan budget exceeded
es-toolkit prod — scan budget exceeded
expo-server-sdk prod — scan budget exceeded
fast-deep-equal prod — scan budget exceeded
fflate prod — scan budget exceeded
ffmpeg-static prod — scan budget exceeded
file-type prod — scan budget exceeded
fuse.js prod — scan budget exceeded
gray-matter prod — scan budget exceeded
hono prod — scan budget exceeded
html-to-text prod — scan budget exceeded
i18next prod — scan budget exceeded
i18next-browser-languagedetector prod — scan budget exceeded
i18next-resources-to-backend prod — scan budget exceeded
immer prod — scan budget exceeded
ioredis prod — scan budget exceeded
jose prod — scan budget exceeded
js-sha256 prod — scan budget exceeded
jsondiffpatch prod — scan budget exceeded
jsonl-parse-stringify prod — scan budget exceeded
langfuse prod — scan budget exceeded
langfuse-core prod — scan budget exceeded
lexical prod — scan budget exceeded

verified_user Application data leak confirmed

App Privacy Score

bar_chart Score Breakdown

list Scan Summary

swap_horiz Confirmed data exfiltration in application code

</> First-Party Code

first-party (npm): apps/server

first-party (npm): packages/model-runtime

first-party (npm)

first-party (npm): packages/web-crawler

first-party (npm): packages/heterogeneous-agents

first-party (npm): apps/desktop/src/main

first-party (npm): e2e

first-party (npm): packages/agent-runtime

first-party (npm): packages/agent-tracing

first-party (npm): packages/app-config

first-party (npm): packages/builtin-tool-cloud-sandbox

first-party (npm): packages/builtin-tool-creds

first-party (npm): packages/builtin-tool-local-system

first-party (npm): packages/builtin-tool-skills

first-party (npm): packages/chat-adapter-qq

first-party (npm): packages/database

first-party (npm): packages/device-control

first-party (npm): packages/device-gateway-client

first-party (npm): packages/electron-server-ipc

first-party (npm): packages/env

first-party (npm): packages/eval-dataset-parser

first-party (npm): packages/file-loaders

first-party (npm): packages/llm-generation-tracing

first-party (npm): packages/local-file-shell

first-party (npm): packages/memory-user-memory

first-party (npm): packages/model-bank

first-party (npm): packages/observability-otel

first-party (npm): packages/openapi

first-party (npm): packages/python-interpreter

first-party (npm): packages/ssrf-safe-fetch

first-party (npm): packages/tool-runtime

first-party (npm): packages/trpc

first-party (npm): packages/utils

</> Dependencies

@fal-ai/client

@codesandbox/sandpack-react

@ant-design/icons

@anthropic-ai/sdk

@azure-rest/ai-inference

@cfworker/json-schema

@composio/core

Skipped dependencies