Close Open Privacy Scan

link https://github.com/lobehub/lobe-chat
bolt Snapshot: commit 12d9b9b
science engine v1.5
schedule 2026-07-15T23:17:27.738140+00:00

verified_user Application data leak confirmed

High-confidence data exfiltration identified in application code.

smart_toy MCP server detected: @anthropic-ai/sdk, @modelcontextprotocol/sdk, openai — detected in dependencies, not a safety judgment.
Incomplete scan — only 12/200 dependencies were analyzed. Treat the score as provisional.

App Privacy Score

0 /100
High privacy risk — application leak confirmed

High risk · 4216 finding(s)

Dependency score: 57 (Medium risk)

bar_chart Score Breakdown

pii_flow −60
telemetry −25
egress −15
env_fs −3

list Scan Summary

79 high 34 medium 4103 low
First-party packages: 33
Dependency packages: 6
Ecosystem: npm

swap_horiz Confirmed data exfiltration in application code

External domains: 1-17-1-sandpack.codesandbox.io1.1.1.110.0.0.110.1.2.310.255.255.255169.254.169.254172.15.0.1172.16.0.1172.20.10.5172.31.255.255172.32.0.1192.167.1.1192.168.0.1192.168.1.1192.168.1.256192.168.255.255192.169.1.1256.256.256.256302.ai8.8.8.8a.comabc.comagent-gateway.lobehub.comai-gateway.vercel.shai-userxxxxxxxxxx.services.ai.azure.comai.360.cnai.360.comai.azure.comai.gitee.comai.google.devai.meta.comaiart.tencent.comaihubmix.comalipaytbox.yuque.comampcode.comanalytics.umami.isanother.comanthropic.comapi-data.line.meapi-inference.modelscope.cnapi.302.aiapi.360.cnapi.abc.comapi.ai21.comapi.anthropic.comapi.anthropic.proxyapi.baichuan-ai.comapi.bfl.aiapi.bochaai.comapi.cerebras.aiapi.cloudai.tencent.comapi.cloudflare.comapi.codesandbox.ioapi.cohere.aiapi.cohere.comapi.comapi.cometapi.comapi.custom.comapi.deepseek.comapi.exa.aiapi.firecrawl.devapi.fireworks.aiapi.github.comapi.githubcopilot.comapi.groq.comapi.kimi.comapi.line.meapi.lingyiwanwu.comapi.lkeap.cloud.tencent.comapi.longcat.chatapi.minimax.ioapi.minimaxi.comapi.mistral.aiapi.moonshot.cnapi.newapi.comapi.novita.aiapi.openai.comapi.perplexity.aiapi.ppinfra.comapi.replicate.comapi.sambanova.aiapi.search.brave.comapi.search1api.comapi.sgroup.qq.comapi.siliconflow.cnapi.slack.comapi.stepfun.comapi.straico.comapi.studio.nebius.comapi.tavily.comapi.tbox.cnapi.telegram.orgapi.test.comapi.together.xyzapi.upstage.aiapi.v0.devapi.x.aiapi.xiaomimimo.comapig.console.aliyun.comapp.composio.devapp.lobehub.comapp.posthog.comapp.test.comark.ap-southeast.bytepluses.comark.cn-beijing.volces.comarxiv.orgauthauth.x.aiavatar.urlavatars0.githubusercontent.comazure.microsoft.comb.combackend.composio.devbad-url.combaijiahao.baidu.combaike.baidu.combedrock-runtimebedrock-runtime-fipsbfl.aibiz.finance.sina.com.cnbluebubbles.appbots.qq.combuild.nvidia.comcdncdn.discordapp.comcdn.examplecdn.hailuoai.comcdn.jsdelivr.netcdn.minimax.comcdn.openai.comcdn.qwen.comcdn.siliconcloud.cncdn.tailwindcss.comcdn.wenxin.comcdn.x.aicdn.zhipu.aicerebras.aichaoyu.bisu.edu.cnchat-plugins.lobehub.comchat-preview.lobehub.comchat.intern-ai.org.cnchatapi.akash.networkchatgpt.comchrome.browserless.iocitation.comclaude.aicloud.baidu.comcloud.google.comcloud.infini-ai.comcloud.langfuse.comcloud.lobehub.comcloud.sambanova.aicloud.tencent.comcloud.zidongtaichu.comcm.cau.edu.cncodesandbox.iocoding.dashscope.aliyuncs.comcohere.comcometapi.comcomposio.devconsole.bce.baidu.comconsole.cloud.google.comconsole.cloud.tencent.comconsole.groq.comcustomcustom-api.bfl.aicustom-azure.openai.azure.comcustom-comfyuicustom-endpoint.comcustom-ollamacustom-proxy.new-api.comcustom.api.comcustom.baidubce.comcustom.cloudflare.urlcustom.cohere.aicustom.comcustom.mocked.urlcustom.modelscope.cncustom.ollama.comcustom.openrouter.aicustom.spark.comcustom.urlcvpr.thecvf.comdashboard.composio.devdashscope-intl.aliyuncs.comdashscope.aliyuncs.comdashscope.oss-cn-beijing.aliyuncs.comdatatracker.ietf.orgdeepsearch.jina.aideepseek.comdemo.comdeveloper.mozilla.orgdeveloper.qiniu.comdevelopers.cloudflare.comdevelopers.line.bizdevelopers.openai.comdevelopers.upstage.aidevice-gateway.lobehub.comdiscord.comdiscord.ggdocs.ai21.comdocs.aihubmix.comdocs.anthropic.comdocs.aws.amazon.comdocs.cohere.comdocs.composio.devdocs.expo.devdocs.mistral.aidocs.perplexity.aidocs.together.aidocs.vllm.aidocs.x.aidocs.z.aie.comethereal.emailexample1.comexample2.comexample3.comfailed.comfal.aifallback-endpoint.comfiles.examplefiles.slack.comfireworks.aifirst.comfist.xjtu.edu.cnfonts.googleapis.comfonts.gstatic.comgateway.ai.cloudflare.comgateway.test.comgenerativelanguage.googleapis.comgithub.comgitlab.comgroq.comgw.test.comhello.mockhelp.aliyun.comhigress.cnhooks.slack.comhttpbin.orghub-apac-1.lobeobjects.spacehuggingface.cohunyuan.tencent.comhyimg.tencentmaas.comi.redd.iticons.duckduckgo.comilinkai.weixin.qq.comimg.pnginference-docs.cerebras.aiinference.readthedocs.iointegrate.api.nvidia.cominternlm.intern-ai.org.cninvalid-url.comissuer.comjina.aikagi.comlearn.microsoft.comlinear.appling.tbox.cnlmstudio.ailobe.lilobechat.comlobehub.comlocal.filelongcat.chatm.mp.oeeee.comm.thepaper.cnmarket.lobehub.commedium.commetadata.google.internalminimax-cdn.commistral.aiml.azure.commodels.devmodels.github.aimodelscope.cnmoment.rednet.cnmultimedia.nt.qq.com.cnmy-aihubmix-mirror.commy-azure.openai.azure.commy-server.commyapp.commyresource.cognitiveservices.azure.comnebius.comnew-avatar.comnew.qq.comnextra.vercel.appnovac2c.cdn.weixin.qq.comnovita.ainpmmirror.comoaidalleapiprodscus.blob.core.windows.netollama.comopen.bigmodel.cnopen.feishu.cnopen.larksuite.comopenai.comopenai.qiniu.comopencode.aiopenrouter.aip4-fdl.klingai.compinchwork.devplacekitten.complatform.baichuan-ai.complatform.claude.complatform.deepseek.complatform.lingyiwanwu.complatform.minimax.ioplatform.minimaxi.complatform.moonshot.aiplatform.openai.complatform.sensenova.cnplatform.stepfun.complatform.xiaomimimo.complausible.ioplay.google.complugin.anspire.cnppinfra.compreview-url.vercel.apppreview.sandpack-static-server.codesandbox.ioq.qq.comqianfan-img-gen.bj.bcebos.comqianfan-model.bj.bcebos.comqianfan.baidubce.comqstash-eu-central-1.upstash.ioqstash.upstash.iorr.jina.air.jinaai.cnraw.githubusercontent.comregistry.npmjs.orgregistry.npmmirror.comreplicate.comresult1.comresult2.comrlzy.gdufe.edu.cnrouter.huggingface.coss.jina.ais.jinaai.cns3s3-fipss3-fips.dualstacks3-fips.dualstack.us-east-1s3-fips.us-east-1s3-object-lambdas3-object-lambda-fipss3.amazonaws.coms3.dualstacks3.dualstack.us-east-1s3express-controlsandbox.api.sgroup.qq.comsandpack-bundler.codesandbox.iosandpack.codesandbox.ioscribe.ripsecond.comself-hosted.examplesignedsiliconflow.cnslack.comsogou.comsource1.comsource2.comspace.bilibili.comspark-api-open.xf-yun.comstepfun.comstorage.googleapis.comstraico.comstudio.ai21.comstudio.nebius.comsuccess1.comsuccess2.comt.metech.sina.cntelemetry.composio.devtest-azure.openai.azure.comtest-ollama-url.localtest-searxng.comtest.azure.comtest.cognitiveservices.azure.comtest.comtest.openai.azure.comtest.unstructured.iotest1.comtest2.comtestflight.apple.comthird.comtianqi.moji.comtianqi.so.comtoken.sensenova.cntokenhub.tencentmaas.comunknown-endpoint.comunpkg.comupstage.aiuse-for-dev.r2.cloudflarestorage.comuser-azure.openai.azure.comuser-ollama-urlv.qq.comv0.devvalid.comvercel.comvertex-endpoint.comvertexaisearch.cloud.google.comwallstreetcn.comwanqing.streamlakeapi.comweather.cma.cnwenxin.comwizardforcel.gitbooks.ioworkflow-run-guard.localwww.36kr.comwww.accuweather.comwww.aliyun.comwww.bilibili.comwww.bing.comwww.chinanews.comwww.chinanews.com.cnwww.comfy.orgwww.douyin.comwww.example.co.ukwww.gks.mof.gov.cnwww.google.comwww.googleapis.comwww.hzqx.comwww.lingyiwanwu.comwww.minimaxi.comwww.mnw.cnwww.moonshot.aiwww.perplexity.aiwww.qiniu.comwww.qiumiwu.comwww.reddit.comwww.search1api.comwww.sensenova.cnwww.streamlake.comwww.thepaper.cnwww.together.aiwww.volcengine.comwww.w3.orgwww.weather.com.cnwww.xfyun.cnwww.youtube.comwww.zhihu.comxx.aix.comxai-cdn.comxinghuo.xfyun.cnxywctu-4000.preview.csb.appyour-proxy-url.comyour-resource.cognitiveservices.azure.comyour-server.comyour.new-api-provider.comyourapi.cnz.aizenmux.aizh.m.wikipedia.orgzh.numberempire.comzh.wikipedia.orgzhipuai.cnzhuanlan.zhihu.com

high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/docsWorkflow/utils.ts:87 → repo/scripts/docsWorkflow/utils.ts:96
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/serverLauncher/startServer.js:131 → repo/scripts/serverLauncher/startServer.js:141
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/serverLauncher/startServer.js:168 → repo/scripts/serverLauncher/startServer.js:185
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/src/app/(backend)/market/oidc/[[...segments]]/route.ts:7 → repo/src/app/(backend)/market/oidc/[[...segments]]/route.ts:185
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/src/layout/AuthProvider/MarketAuth/oidc.ts:142 → repo/src/layout/AuthProvider/MarketAuth/oidc.ts:150
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/modules/GitHub/index.ts:24 → repo/apps/server/src/modules/GitHub/index.ts:151
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/modules/GitHub/index.ts:24 → repo/apps/server/src/modules/GitHub/index.ts:184
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/modules/GitHub/index.ts:24 → repo/apps/server/src/modules/GitHub/index.ts:210
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:79
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:171
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:535
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:589
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:647
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:71
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:262
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:336
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:424
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:482
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:565
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:652
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:810
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → repo/apps/server/src/routers/lambda/market/socialProfile.ts:62
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → repo/apps/server/src/routers/lambda/market/socialProfile.ts:88
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → repo/apps/server/src/routers/lambda/market/socialProfile.ts:141
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → repo/apps/server/src/routers/lambda/market/socialProfile.ts:195
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/bot/BotMessageRouter.ts:749 → repo/apps/server/src/services/bot/BotMessageRouter.ts:767
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/bot/platforms/discord/api.ts:90 → repo/apps/server/src/services/bot/platforms/discord/api.ts:90
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/changelog/index.ts:34 → repo/apps/server/src/services/changelog/index.ts:54
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/changelog/index.ts:34 → repo/apps/server/src/services/changelog/index.ts:92
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/changelog/index.ts:34 → repo/apps/server/src/services/changelog/index.ts:207
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/desktopRelease/index.ts:120 → repo/apps/server/src/services/desktopRelease/index.ts:122
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/market/index.ts:13 → repo/apps/server/src/services/market/index.ts:210
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/market/index.ts:13 → repo/apps/server/src/services/market/index.ts:708
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/oauthDeviceFlow/index.ts:105 → repo/apps/server/src/services/oauthDeviceFlow/index.ts:105
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/oauthDeviceFlow/index.ts:169 → repo/apps/server/src/services/oauthDeviceFlow/index.ts:169
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55 → repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/anspire/index.ts:74 → repo/apps/server/src/services/search/impls/anspire/index.ts:71
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/bocha/index.ts:64 → repo/apps/server/src/services/search/impls/bocha/index.ts:61
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/brave/index.ts:70 → repo/apps/server/src/services/search/impls/brave/index.ts:66
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/exa/index.ts:69 → repo/apps/server/src/services/search/impls/exa/index.ts:65
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/firecrawl/index.ts:69 → repo/apps/server/src/services/search/impls/firecrawl/index.ts:66
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/jina/index.ts:48 → repo/apps/server/src/services/search/impls/jina/index.ts:44
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/kagi/index.ts:52 → repo/apps/server/src/services/search/impls/kagi/index.ts:50
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/search1api/index.ts:85 → repo/apps/server/src/services/search/impls/search1api/index.ts:82
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/tavily/index.ts:40 → repo/apps/server/src/services/search/impls/tavily/index.ts:60
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/workflows/runGuard/qstashCancel.ts:79 → repo/apps/server/src/workflows/runGuard/qstashCancel.ts:93
high first-party (npm): packages/web-crawler User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/browserless.ts:10 → repo/packages/web-crawler/src/crawImpl/browserless.ts:42
high first-party (npm): packages/web-crawler User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/exa.ts:25 → repo/packages/web-crawler/src/crawImpl/exa.ts:32
high first-party (npm): packages/web-crawler User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/firecrawl.ts:54 → repo/packages/web-crawler/src/crawImpl/firecrawl.ts:62
high first-party (npm): packages/web-crawler User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/jina.ts:11 → repo/packages/web-crawler/src/crawImpl/jina.ts:17
high first-party (npm): packages/web-crawler User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/search1api.ts:19 → repo/packages/web-crawler/src/crawImpl/search1api.ts:26
high first-party (npm): packages/web-crawler User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/tavily.ts:26 → repo/packages/web-crawler/src/crawImpl/tavily.ts:33
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:51 → repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:49
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:167 → repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:164
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/aihubmix/index.ts:163 → repo/packages/model-runtime/src/providers/aihubmix/index.ts:181
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/azureai/index.ts:33 → repo/packages/model-runtime/src/providers/azureai/index.ts:67
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/bfl/createImage.ts:125 → repo/packages/model-runtime/src/providers/bfl/createImage.ts:121
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/bfl/createImage.ts:161 → repo/packages/model-runtime/src/providers/bfl/createImage.ts:158
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/cloudflare/index.ts:77 → repo/packages/model-runtime/src/providers/cloudflare/index.ts:93
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/cloudflare/index.ts:77 → repo/packages/model-runtime/src/providers/cloudflare/index.ts:156
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/comfyui/index.ts:77 → repo/packages/model-runtime/src/providers/comfyui/index.ts:101
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/google/index.ts:135 → repo/packages/model-runtime/src/providers/google/index.ts:471
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/minimax/createVideo.ts:55 → repo/packages/model-runtime/src/providers/minimax/createVideo.ts:53
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/minimax/createVideo.ts:78 → repo/packages/model-runtime/src/providers/minimax/createVideo.ts:76
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/minimax/createVideo.ts:177 → repo/packages/model-runtime/src/providers/minimax/createVideo.ts:174
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/nebius/index.ts:34 → repo/packages/model-runtime/src/providers/nebius/index.ts:31
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:41 → repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:38
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:126 → repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:123
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/straico/index.ts:46 → repo/packages/model-runtime/src/providers/straico/index.ts:44
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:78 → repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:75
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:37 → repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:35
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:137 → repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:134
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/xai/createVideo.ts:35 → repo/packages/model-runtime/src/providers/xai/createVideo.ts:33
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/xai/createVideo.ts:127 → repo/packages/model-runtime/src/providers/xai/createVideo.ts:124
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createImage.ts:39 → repo/packages/model-runtime/src/providers/zhipu/createImage.ts:37
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createImage.ts:134 → repo/packages/model-runtime/src/providers/zhipu/createImage.ts:131
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:41 → repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:39
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:147 → repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:144
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/index.ts:222 → repo/packages/model-runtime/src/providers/zhipu/index.ts:220
medium first-party (npm): apps/server Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.
repo/apps/server/src/services/bot/BotMessageRouter.ts:749 → repo/apps/server/src/services/bot/BotMessageRouter.ts:767

</> First-Party Code

first-party (npm): apps/server

npm first-party
high pii_flow production #cb215e88b5eb23c8 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/modules/GitHub/index.ts:151 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/modules/GitHub/index.ts:24 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/modules/GitHub/index.ts:151 
    const response = await fetch(zipUrl, {
      headers: {
        'User-Agent': this.userAgent,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #2d56d0a308973bb9 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/modules/GitHub/index.ts:184 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/modules/GitHub/index.ts:24 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/modules/GitHub/index.ts:184 
    const response = await fetch(rawUrl, {
      headers: {
        'User-Agent': this.userAgent,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #518ec8ac40b8378c — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/modules/GitHub/index.ts:210 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/modules/GitHub/index.ts:24 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/modules/GitHub/index.ts:210 
    const response = await fetch(rawUrl, {
      headers: {
        'User-Agent': this.userAgent,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #c49d9748f65b437f — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:79 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agent.ts:79 
    const response = await fetch(userInfoUrl, {
      headers,
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #31dd080492fce348 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:171 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agent.ts:171 
    const response = await fetch(forkUrl, {
      body: JSON.stringify({
        identifier: item.identifier,
        name: item.name,
        status: item.status,
        versionNumber: item.versionNumber,
        visibility: item.visibility,
      }),
      headers,
      method: 'POST',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #94715e619f86140a — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:535 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agent.ts:535 
        const response = await fetch(url, { headers, method: 'GET' });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #984baf04f09c142d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:589 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agent.ts:589 
        const response = await fetch(forkSourceUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #7e67e9154942fbcf — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:647 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agent.ts:647 
        const response = await fetch(forksUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #4d9db9fb40676754 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:71 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agentGroup.ts:71 
    const response = await fetch(userInfoUrl, {
      headers,
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #a1938d3cb33953bf — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:262 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agentGroup.ts:262 
        const response = await fetch(deprecateUrl, {
          headers,
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #8fdd8f933c58dc2c — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:336 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agentGroup.ts:336 
        const response = await fetch(forkUrl, {
          body: JSON.stringify({
            identifier: input.identifier,
            name: input.name,
            status: input.status,
            versionNumber: input.versionNumber,
            visibility: input.visibility,
          }),
          headers,
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #9608cbb88566cc02 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:424 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agentGroup.ts:424 
        const response = await fetch(forkSourceUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #87e50852c392e2e6 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:482 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agentGroup.ts:482 
        const response = await fetch(forksUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #de71a7a321799cf2 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:565 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agentGroup.ts:565 
        const response = await fetch(listUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #138c1dff900418d5 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:652 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agentGroup.ts:652 
        const response = await fetch(publishUrl, {
          headers,
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #d6351cb912af872f — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:810 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/agentGroup.ts:810 
        const response = await fetch(unpublishUrl, {
          headers,
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #b55f8dab09eb1750 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:62 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/socialProfile.ts:62 
            const response = await fetch(`${MARKET_BASE_URL}/api/v1/user/claims`, {
              body: JSON.stringify({
                assetId: Number(skillId),
                assetType: 'skill',
              }),
              headers: {
                ...headers,
                'Content-Type': 'application/json',
              },
              method: 'POST',
            });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #21101e8473401b2a — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:88 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/socialProfile.ts:88 
            const response = await fetch(`${MARKET_BASE_URL}/api/v1/user/claims`, {
              body: JSON.stringify({
                assetId: Number(pluginId),
                assetType: 'plugin',
              }),
              headers: {
                ...headers,
                'Content-Type': 'application/json',
              },
              method: 'POST',
            });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #1ea4db2c79fc7b2e — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:141 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/socialProfile.ts:141 
      const response = await fetch(`${MARKET_BASE_URL}/api/v1/user/claims/scan`, {
        headers,
        method: 'GET',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #c3a5e4ad55a04716 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:195 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/routers/lambda/market/socialProfile.ts:195 
        const response = await fetch(`${MARKET_BASE_URL}/api/v1/user/claims/submit-repo`, {
          body: JSON.stringify({
            branch: input.branch,
            gitUrl: input.gitUrl,
            type: input.type,
          }),
          headers: {
            ...headers,
            'Content-Type': 'application/json',
            ...(input.actAs === undefined
              ? {}
              : { 'x-lobe-owner-account-id': String(input.actAs) }),
          },
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #4be451ed7ff4a66d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/bot/BotMessageRouter.ts:767 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/bot/BotMessageRouter.ts:749 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/bot/BotMessageRouter.ts:767 
        await thread.post(text);

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #75eaa72b7f705683 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/bot/platforms/discord/api.ts:90 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/bot/platforms/discord/api.ts:90 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/bot/platforms/discord/api.ts:90 
    const data = (await this.rest.post(Routes.userChannels(), {
      body: { recipient_id: recipientId },
    })) as { id: string };

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #972a66dd52ba41b2 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/changelog/index.ts:54 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/changelog/index.ts:34 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/changelog/index.ts:54 
      const res = await fetch(url, {
        next: { revalidate: 3600, tags: [FetchCacheTag.Changelog] },
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #651ceb1feb697613 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/changelog/index.ts:92 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/changelog/index.ts:34 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/changelog/index.ts:92 
      const response = await fetch(url, {
        next: { revalidate: 3600, tags: [FetchCacheTag.Changelog] },
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #e2aae019666e4667 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/changelog/index.ts:207 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/changelog/index.ts:34 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/changelog/index.ts:207 
        const res = await fetch(url);

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #44938c47ea8baf1d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/desktopRelease/index.ts:122 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/desktopRelease/index.ts:120 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/desktopRelease/index.ts:122 
  const res = await fetch(`https://api.github.com/repos/${owner}/${repo}/releases/latest`, {
    headers: {
      ...(token ? { Authorization: `Bearer ${token}` } : {}),
      'Accept': 'application/vnd.github+json',
      'User-Agent': 'lobehub-server',
    },
    next: { revalidate: 300, tags: [FetchCacheTag.DesktopRelease] },
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #73d00ea1223437e0 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/market/index.ts:210 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/market/index.ts:13 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/market/index.ts:210 
    const response = await fetch(userInfoUrl, {
      // @ts-ignore
      headers: this.market.headers,
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #97e51b912c2a1fd1 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/market/index.ts:708 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/market/index.ts:13 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/market/index.ts:708 
    const response = await fetch(uploadUrl, {
      body: formData,
      headers: authHeaders,
      method: 'POST',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #cd61d4ea073e4cce — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/oauthDeviceFlow/index.ts:105 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/oauthDeviceFlow/index.ts:105 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/oauthDeviceFlow/index.ts:105 
    const response = await fetch(config.tokenEndpoint, {
      body: new URLSearchParams({
        client_id: config.clientId,
        device_code: deviceCode,
        grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
      }).toString(),
      headers: {
        'Accept': 'application/json',
        'Content-Type': 'application/x-www-form-urlencoded',
      },
      method: 'POST',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #5c94d7956fd6bf92 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/oauthDeviceFlow/index.ts:169 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/oauthDeviceFlow/index.ts:169 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/oauthDeviceFlow/index.ts:169 
    const response = await fetch(config.tokenEndpoint, {
      body: new URLSearchParams({
        client_id: config.clientId,
        grant_type: 'refresh_token',
        refresh_token: refreshToken,
      }).toString(),
      headers: {
        'Accept': 'application/json',
        'Content-Type': 'application/x-www-form-urlencoded',
      },
      method: 'POST',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #9660d85625705596 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55 
    const response = await fetch(GithubCopilotOAuthService.TOKEN_EXCHANGE_URL, {
      headers: {
        'Accept': 'application/json',
        'Authorization': `token ${oauthToken}`,
        'User-Agent': 'LobeChat/1.0',
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #16cc3d5e70bf401f — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/anspire/index.ts:71 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/search/impls/anspire/index.ts:74 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/search/impls/anspire/index.ts:71 
      response = await fetch(`${endpoint}?${searchParams.toString()}`, {
        headers: {
          'Accept': '*/*',
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Connection': 'keep-alive ',
          'Content-Type': 'application/json',
        },
        method: 'GET',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #644230a62635ff41 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/bocha/index.ts:61 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/search/impls/bocha/index.ts:64 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/search/impls/bocha/index.ts:61 
      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #cfe8cba61928f2c6 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/brave/index.ts:66 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/search/impls/brave/index.ts:70 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/search/impls/brave/index.ts:66 
      response = await fetch(`${endpoint}?${searchParams.toString()}`, {
        headers: {
          'Accept': 'application/json',
          'Accept-Encoding': 'gzip',
          'X-Subscription-Token': this.apiKey ? this.apiKey : '',
        },
        method: 'GET',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #2c48eddb891a3e12 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/exa/index.ts:65 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/search/impls/exa/index.ts:69 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/search/impls/exa/index.ts:65 
      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Content-Type': 'application/json',
          'x-api-key': this.apiKey ? this.apiKey : '',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #7f98ba16f4520609 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/firecrawl/index.ts:66 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/search/impls/firecrawl/index.ts:69 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/search/impls/firecrawl/index.ts:66 
      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #f71163779b7d0d0f — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/jina/index.ts:44 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/search/impls/jina/index.ts:48 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/search/impls/jina/index.ts:44 
      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Accept': 'application/json',
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
          'X-Respond-With': 'no-content',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #c6b3eb0e41ca939b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/kagi/index.ts:50 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/search/impls/kagi/index.ts:52 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/search/impls/kagi/index.ts:50 
      response = await fetch(`${endpoint}?${searchParams.toString()}`, {
        headers: {
          Authorization: this.apiKey ? `Bot ${this.apiKey}` : '',
        },
        method: 'GET',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #8c5e07c4f63b6fd5 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/search1api/index.ts:82 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/search/impls/search1api/index.ts:85 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/search/impls/search1api/index.ts:82 
      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #5a44d011207db694 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/tavily/index.ts:60 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/search/impls/tavily/index.ts:40 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/search/impls/tavily/index.ts:60 
      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #43b9d2889d3f4075 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/workflows/runGuard/qstashCancel.ts:93 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/workflows/runGuard/qstashCancel.ts:79 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/workflows/runGuard/qstashCancel.ts:93 
  const response = await fetch(new URL('/v2/workflows/runs', qstashUrl), {
    body: JSON.stringify({ workflowUrl: [workflowUrlPrefix] }),
    headers: {
      'Authorization': `Bearer ${token}`,
      'Content-Type': 'application/json',
    },
    method: 'DELETE',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
medium pii_flow production #fd414eef2e392f7e — Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.
repo/apps/server/src/services/bot/BotMessageRouter.ts:767 · flow /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/bot/BotMessageRouter.ts:749 → /tmp/closeopen-9mgsdxzw/repo/apps/server/src/services/bot/BotMessageRouter.ts:767 
        await thread.post(text);

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
medium telemetry production #3005abe25564361c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/apps/server/src/services/user/index.ts:45 
    analytics?.track({
      name: 'user_register_completed',
      properties: {
        spm: 'user_service.init_user.user_created',
      },
      userId: user.id,
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 288 low-confidence finding(s)
low env_fs production #61386acf8b306246 — Environment-variable access.
repo/apps/server/src/agent-hono/handlers/finalizeAbandoned.ts:67 
      if (process.env.QSTASH_TOKEN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #575a65afba20e025 — Environment-variable access.
repo/apps/server/src/agent-hono/handlers/gatewayCron.ts:42 
    appUrl: process.env.APP_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #541758e557f4b3ee — Environment-variable access.
repo/apps/server/src/agent-hono/handlers/gatewayCron.ts:191 
  if (process.env.MESSAGE_GATEWAY_URL && process.env.MESSAGE_GATEWAY_SERVICE_TOKEN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e85b50d0445f3136 — Environment-variable access.
repo/apps/server/src/agent-hono/index.ts:55 
  bearerSecretAuth(() => process.env.CRON_SECRET),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc51c391dccfd1ba — Environment-variable access.
repo/apps/server/src/agent-hono/index.ts:62 
  bearerSecretAuth(() => process.env.KEY_VAULTS_SECRET),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5dcb93fd3c0a2845 — Environment-variable access.
repo/apps/server/src/agent-hono/middlewares/qstashOrApiKeyAuth.ts:28 
  const apiKey = process.env.AGENT_EXEC_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fdc4c07cc6a7257b — Environment-variable access.
repo/apps/server/src/globalConfig/genServerAiProviderConfig.test.ts:39 
        delete process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1613687987b614b — Environment-variable access.
repo/apps/server/src/globalConfig/genServerAiProviderConfig.test.ts:100 
    process.env.OPENAI_MODEL_LIST = '+gpt-4,+gpt-3.5-turbo';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #940e5eae6978784a — Environment-variable access.
repo/apps/server/src/globalConfig/genServerAiProviderConfig.test.ts:118 
    process.env.CUSTOM_OPENAI_MODELS = '+custom-model';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4179154b8680835c — Environment-variable access.
repo/apps/server/src/globalConfig/genServerAiProviderConfig.test.ts:134 
    process.env.OPENAI_MODEL_LIST = '+gpt-4->deployment1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #47eef3f01fe2da9d — Environment-variable access.
repo/apps/server/src/globalConfig/genServerAiProviderConfig.ts:47 
        process.env[providerConfig.modelListKey ?? `${providerUpperCase}_MODEL_LIST`];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f5a096b12cb329b9 — Environment-variable access.
repo/apps/server/src/globalConfig/index.ts:64 
      fetchOnClient: isDesktop ? false : !process.env.OLLAMA_PROXY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05d965f66abb8581 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:7 
const originalWorkflowParallelism = process.env[WORKFLOW_PARALLELISM_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f73dc11251287d97 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:12 
      delete process.env[WORKFLOW_PARALLELISM_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c1409bb737867253 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:16 
    process.env[WORKFLOW_PARALLELISM_ENV] = originalWorkflowParallelism;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a913d6fe0cc5dc5 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:20 
    delete process.env[WORKFLOW_PARALLELISM_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8cc08a935bfea353 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:26 
    process.env[WORKFLOW_PARALLELISM_ENV] = '17';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #814a03f54064b957 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:32 
    process.env[WORKFLOW_PARALLELISM_ENV] = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eb7c44d826229837 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:36 
    process.env[WORKFLOW_PARALLELISM_ENV] = 'abc';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5cea453c0e9f5142 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:107 
  const apiKey = process.env.MEMORY_USER_MEMORY_GATEKEEPER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b912eab4ca5be56e — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:108 
  const baseURL = process.env.MEMORY_USER_MEMORY_GATEKEEPER_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #66ca19fcb07134b5 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:109 
  const model = process.env.MEMORY_USER_MEMORY_GATEKEEPER_MODEL || DEFAULT_MINI_MODEL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #493c62f0260c8cf0 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:110 
  const provider = process.env.MEMORY_USER_MEMORY_GATEKEEPER_PROVIDER || DEFAULT_MINI_PROVIDER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8fd4fa73bb5aa9a8 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:111 
  const language = process.env.MEMORY_USER_MEMORY_GATEKEEPER_LANGUAGE || 'English';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5fc02cba503c74f7 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:123 
  const model = process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_MODEL || fallback.model;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ab83169a4e7f30f — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:125 
    process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_PROVIDER ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d43037355420a53d — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:130 
    apiKey: process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_API_KEY ?? fallback.apiKey,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8c3600dc3eff7321 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:131 
    baseURL: process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_BASE_URL ?? fallback.baseURL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc6517998f710de6 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:132 
    language: process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_LANGUAGE ?? fallback.language,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ddb3ab6ecfdf0f18 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:139 
  const apiKey = process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #087a6f30fb6a6e84 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:140 
  const baseURL = process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #642c40e2faef933f — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:141 
  const model = process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_MODEL || fallbackModel;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4489aa1661d83bb0 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:142 
  const provider = process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_PROVIDER || DEFAULT_MINI_PROVIDER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90da8116a0381835 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:145 
    process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_CONTEXT_LIMIT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4303151eb03865c5 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:151 
      const override = (process.env as Record<string, string | undefined>)[envKey];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #259d379ccfcf7c3c — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:176 
  const model = process.env.MEMORY_USER_MEMORY_EMBEDDING_MODEL || fallbackModel || defaultModel;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e31181b449b17b15 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:178 
    process.env.MEMORY_USER_MEMORY_EMBEDDING_PROVIDER ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2addc93e789228c7 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:184 
    apiKey: process.env.MEMORY_USER_MEMORY_EMBEDDING_API_KEY ?? fallbackApiKey,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88a99a00cc1a6bc8 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:185 
    baseURL: process.env.MEMORY_USER_MEMORY_EMBEDDING_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b04b25e55a549ff — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:188 
    contextLimit: parseTokenLimitEnv(process.env.MEMORY_USER_MEMORY_EMBEDDING_CONTEXT_LIMIT),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e35024753267504f — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:199 
  const model = process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_MODEL || fallbackModel;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d45f920c91e4f363 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:201 
    process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_PROVIDER ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4edaeb2dc3424b6d — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:206 
    apiKey: process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_API_KEY ?? fallbackApiKey,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61d208e542c0abf7 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:207 
    baseURL: process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #088ec61ae0439a80 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:209 
    contextLimit: parseTokenLimitEnv(process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_CONTEXT_LIMIT),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9451afb81351530 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:216 
  const accessKeyId = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_ACCESS_KEY_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f086ff83b6a8536 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:217 
  const secretAccessKey = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_SECRET_ACCESS_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b86e2a64162b618 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:218 
  const bucketName = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_BUCKET_NAME;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #293437833abba945 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:219 
  const region = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_REGION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5e1b0d336ff2ce3 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:220 
  const endpoint = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_ENDPOINT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9558de0139ac8814 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:221 
  const forcePathStyle = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_FORCE_PATH_STYLE === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb4a737e5ef87a45 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:222 
  const pathPrefix = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_PATH_PREFIX;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62819414241df567 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:268 
    enableBenchmarkLoCoMo: process.env.MEMORY_USER_MEMORY_FEATURE_FLAG_BENCHMARK_LOCOMO === 'true',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c97fa12af723fbda — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:270 
  const concurrencyRaw = process.env.MEMORY_USER_MEMORY_CONCURRENCY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8977abad9a5e70eb — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:278 
    process.env.MEMORY_USER_MEMORY_WORKFLOW_PROCESS_USER_TOPICS_PARALLELISM,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd7a7e34027b7933 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:282 
    process.env.MEMORY_USER_MEMORY_WORKFLOW_MAX_TOPICS_PER_USER_PER_RUN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #04edfef0532e1538 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:286 
  const whitelistUsers = process.env.MEMORY_USER_MEMORY_WHITELIST_USERS?.split(',')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fbe2a47bd8aa8cab — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:290 
  const webhookHeaders = process.env.MEMORY_USER_MEMORY_WEBHOOK_HEADERS?.split(',')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5928486e5dd53f3c — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:300 
  const upstashWorkflowExtraHeaders = process.env.MEMORY_USER_MEMORY_WORKFLOW_EXTRA_HEADERS?.split(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f490f2ce9d7dfb6 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:313 
    process.env.MEMORY_USER_MEMORY_GATEKEEPER_PREFERRED_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b9d168789ed4f3fb — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:316 
    process.env.MEMORY_USER_MEMORY_GATEKEEPER_PREFERRED_MODELS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #67996ecadbcd0ed8 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:319 
    process.env.MEMORY_USER_MEMORY_EMBEDDING_PREFERRED_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9465a0359892d006 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:322 
    process.env.MEMORY_USER_MEMORY_EMBEDDING_PREFERRED_MODELS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0b927277ab9389c — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:325 
    process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_PREFERRED_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2040951c560e179c — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:328 
    process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_PREFERRED_MODELS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f4f2ffe9bd36e08 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:348 
      baseUrl: process.env.MEMORY_USER_MEMORY_WEBHOOK_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #832c5173143b6d29 — Environment-variable access.
repo/apps/server/src/hono/dev.ts:6 
const env = process.env.NODE_ENV || 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6cd6e24332e155c4 — Environment-variable access.
repo/apps/server/src/hono/dev.ts:31 
(process.env as Record<string, string | undefined>).NODE_ENV ||= 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27d221522bbde0f8 — Environment-variable access.
repo/apps/server/src/hono/standalone.ts:15 
  const parsed = Number.parseInt(process.env.HONO_PORT ?? process.env.PORT ?? '', 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6084b2a796cf640e — Environment-variable access.
repo/apps/server/src/hono/standalone.ts:72 
const host = process.env.HONO_HOST || DEFAULT_HOST;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28f65a3f0054199b — Environment-variable access.
repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:12 
    originalSecret = process.env.KEY_VAULTS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd53a6a899677b3e — Environment-variable access.
repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:13 
    process.env.KEY_VAULTS_SECRET = 'Q10pwdq00KXUu9R+c8A8p4PSlIRWi7KwgUophBtkHVk=';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e4b87456ea56a5d — Environment-variable access.
repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:19 
    process.env.KEY_VAULTS_SECRET = originalSecret;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48dae72164214632 — Environment-variable access.
repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:41 
    process.env.KEY_VAULTS_SECRET = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f340bb189c91d02a — Environment-variable access.
repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:52 
    process.env.KEY_VAULTS_SECRET = Buffer.from('short').toString('base64');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3170259deae77417 — Environment-variable access.
repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:86 
      process.env.KEY_VAULTS_SECRET = 'ofQiJCXLF8mYemwfMWLOHoHimlPu91YmLfU7YZ4lreQ=';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b53d4d7d68874861 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:36 
      process.env.API_KEY_SELECT_MODE = 'random';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a05e85b4486d3ed5 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:44 
      process.env.API_KEY_SELECT_MODE = 'turn';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f03b6489008aab19 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:61 
      process.env.API_KEY_SELECT_MODE = 'random';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a2adb317257ac91 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:72 
      process.env.API_KEY_SELECT_MODE = 'turn';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d5621e56d07102b — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:95 
      process.env.API_KEY_SELECT_MODE = 'random';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ae716f437763b8d — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:107 
      process.env.API_KEY_SELECT_MODE = 'turn';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5bc16ba1849620c — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:120 
      process.env.API_KEY_SELECT_MODE = nanoid();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db626d311a138991 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.test.ts:504 
      process.env.OPENAI_PROXY_URL = 'https://proxy.example.com/v1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #693c473e9b1fd6f0 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.test.ts:514 
      process.env.OPENAI_PROXY_URL = 'https://proxy.example.com/v1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e3ded9ba44a03b4 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.ts:202 
      const baseURL = payload?.baseURL || process.env[`${upperProvider}_PROXY_URL`];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fdb1645b76f7d5c5 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.ts:208 
      const baseURL = payload?.baseURL || process.env.OLLAMA_PROXY_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #819f9d4f22cfec3a — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.ts:354 
  const rawCredentials = payload.apiKey || process.env.VERTEXAI_CREDENTIALS || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f92b397804a04f6 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.ts:359 
  const projectFromEnv = process.env.VERTEXAI_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a44f58602acb11ef — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.ts:365 
    process.env.VERTEXAI_LOCATION ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #61761744e1596a55 — Environment-variable access.
repo/apps/server/src/routers/async/__tests__/caller.test.ts:173 
      const originalEnv = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #889e74efc4738c03 — Environment-variable access.
repo/apps/server/src/routers/async/__tests__/caller.test.ts:174 
      process.env.VERCEL_AUTOMATION_BYPASS_SECRET = 'test-bypass-value';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ef7d8c353dea269f — Environment-variable access.
repo/apps/server/src/routers/async/__tests__/caller.test.ts:186 
        process.env.VERCEL_AUTOMATION_BYPASS_SECRET = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c868df1ce24d1f68 — Environment-variable access.
repo/apps/server/src/routers/async/__tests__/caller.test.ts:188 
        delete process.env.VERCEL_AUTOMATION_BYPASS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #42266fba6da7b417 — Environment-variable access.
repo/apps/server/src/routers/async/__tests__/caller.test.ts:193 
      delete process.env.VERCEL_AUTOMATION_BYPASS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eda89624a33b30cc — Environment-variable access.
repo/apps/server/src/routers/async/caller.ts:22 
  if (process.env.VERCEL_AUTOMATION_BYPASS_SECRET) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46d08b5defa5f89a — Environment-variable access.
repo/apps/server/src/routers/async/caller.ts:23 
    headers['x-vercel-protection-bypass'] = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b4c33018f51fa057 — Environment-variable access.
repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/execAgent.integration.test.ts:28 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #36896b8cd8d5f674 — Environment-variable access.
repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/execAgents.integration.test.ts:23 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f1e24274227742bd — Environment-variable access.
repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/execGroupAgent.integration.test.ts:24 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #095b85fcb98d9169 — Environment-variable access.
repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/multiRoundTools.integration.test.ts:25 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #63bf8c976518161a — Environment-variable access.
repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/serverCallAgent.integration.test.ts:28 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4e9b7ea9e7869a1c — Environment-variable access.
repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/serverSubAgent.integration.test.ts:28 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27e8303f44605a94 — Environment-variable access.
repo/apps/server/src/routers/lambda/composio.ts:228 
      const callbackUrl = `${process.env.APP_URL || process.env.NEXTAUTH_URL || ''}/api/composio/oauth/callback`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f30ecbe61a24c14 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:28 
          process.env.OPENAI_MODEL_LIST =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d518c5bc4a305cb4 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:37 
          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd6cf291fee2cac8 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:41 
          process.env.OPENAI_MODEL_LIST =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1df6573ef83a4f6e — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:50 
          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0423072dada276ca — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:54 
          process.env.OPENAI_MODEL_LIST =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0100e6de5adbec01 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:65 
          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba44d2b9aad7138a — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:69 
          process.env.OPENAI_MODEL_LIST = '-gpt-4';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b431231f61248ed7 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:77 
          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #66a1ba69591e15fb — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:81 
          process.env.OPENAI_MODEL_LIST = '+gpt-4-1106-preview';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e6dd6a46f98e982 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:91 
          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4ff29323a7204e4d — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:95 
          process.env.OPENAI_MODEL_LIST = 'model1,model2,model3，model4';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ad3ec4ef9518d3a — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:130 
          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0fc6147c7d5541e6 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:136 
          process.env.OPENROUTER_MODEL_LIST =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1902b834f94aee46 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:146 
          process.env.OPENROUTER_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #005603e5e1b861ad — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:151 
        const originalApiKey = process.env.DEEPSEEK_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #95d90325fbf35dd0 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:152 
        delete process.env.DEEPSEEK_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #95ae5ce546728860 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:159 
          delete process.env.DEEPSEEK_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8704cf5d05446c55 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:161 
          process.env.DEEPSEEK_API_KEY = originalApiKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85f0468868167240 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:169 
      process.env.DEFAULT_AGENT_CONFIG =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d432f978f122138 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:181 
      process.env.DEFAULT_AGENT_CONFIG = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa81de930c16df44 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:185 
      process.env.DEFAULT_AGENT_CONFIG =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d0a1f89fa40e7ffd — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:197 
      process.env.DEFAULT_AGENT_CONFIG = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #88636571e4e6b34c — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/routers/lambda/exporter.ts:37 
  const response = await fetch(REGULAR_FONT_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #0481adabb2276553 — Environment-variable access.
repo/apps/server/src/routers/lambda/image/index.ts:143 
      if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4251ef541f758990 — Environment-variable access.
repo/apps/server/src/routers/lambda/market/agent.ts:15 
const MARKET_BASE_URL = process.env.MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2073f846f157c48f — Environment-variable access.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 
const MARKET_BASE_URL = process.env.MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b3fdd012ddb9cbb — Environment-variable access.
repo/apps/server/src/routers/lambda/market/index.ts:707 
          secure: process.env.NODE_ENV === 'production',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8251b41fd7a0b07 — Environment-variable access.
repo/apps/server/src/routers/lambda/market/index.ts:716 
          secure: process.env.NODE_ENV === 'production',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cebc828638061657 — Environment-variable access.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 
const MARKET_BASE_URL = process.env.MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d3713f8b351ddbb0 — Environment-variable access.
repo/apps/server/src/routers/lambda/userMemories.ts:931 
      if (process.env.NODE_ENV !== 'production' && process.env.DEV_DISABLE_AUTO_MEMORY === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db9f858157e67902 — Environment-variable access.
repo/apps/server/src/routers/lambda/video/index.ts:139 
      if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c6d018fa8a33b467 — Environment-variable access.
repo/apps/server/src/routers/lambda/video/index.ts:255 
        const callbackBaseUrl = process.env.WEBHOOK_PROXY_URL || appEnv.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #acc72a9d61b2a564 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/AgentRuntimeService.test.ts:164 
    process.env.AGENT_RUNTIME_BASE_URL = 'http://localhost:3010';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ba303444ccb00a0 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/AgentRuntimeService.test.ts:196 
    delete process.env.AGENT_RUNTIME_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de20220ab455dd7e — Environment-variable access.
repo/apps/server/src/services/agentRuntime/AgentRuntimeService.test.ts:202 
      delete process.env.AGENT_RUNTIME_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db2ccbba0c2fc330 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/AgentRuntimeService.test.ts:208 
      process.env.AGENT_RUNTIME_BASE_URL = 'http://custom:3000';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7699a888e19b8c39 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/AgentRuntimeService.ts:90 
if (process.env.VERCEL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc35386633870e98 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/AgentRuntimeService.ts:287 
    const baseUrl = process.env.AGENT_RUNTIME_BASE_URL || appEnv.APP_URL || 'http://localhost:3010';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #23a03e0e82156f83 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/HookDispatcher.ts:31 
    : urlJoin(process.env.INTERNAL_APP_URL || process.env.APP_URL || '', url);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93474087881b13f0 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/HookDispatcher.ts:35 
      const qstashToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f01bdb3fd5b3626 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/HookDispatcher.ts:48 
          ...(process.env.VERCEL_AUTOMATION_BYPASS_SECRET && {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f7a257b994913bff — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/HookDispatcher.ts:49 
            'x-vercel-protection-bypass': process.env.VERCEL_AUTOMATION_BYPASS_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b61a16ce4f1476af — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:273 
    const originalToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #eeec302403b52cf4 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:278 
      delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #686833452f7c4cda — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:282 
      if (originalToken === undefined) delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a2b1799a4231c509 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:283 
      else process.env.QSTASH_TOKEN = originalToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7c26d6c4372fd9a7 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:305 
      process.env.QSTASH_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c3e828bf8c2356f — Environment-variable access.
repo/apps/server/src/services/agentRuntime/snapshotStore.ts:8 
  const explicitValue = process.env.ENABLE_AGENT_S3_TRACING;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2891e2162ece5d00 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/snapshotStore.ts:12 
  return process.env.NODE_ENV === 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f4da9fdc877db6f7 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/snapshotStore.ts:49 
  if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #81474e965303adcc — Filesystem access.
repo/apps/server/src/services/agentSignal/__tests__/promptBoundaries.test.ts:9 
const read = (filePath: string) => readFileSync(path.join(root, filePath), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9f44c730d14d7ea4 — Environment-variable access.
repo/apps/server/src/services/aiAgent/__tests__/execAgent.memory.test.ts:28 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #205d9644ca9ae119 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/services/bot/platforms/discord/client.ts:533 
      const res = await fetch('https://discord.com/api/v10/users/@me', {
        headers: { Authorization: `Bot ${credentials.botToken}` },
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #523fa222a388fe19 — Environment-variable access.
repo/apps/server/src/services/changelog/index.test.ts:261 
        process.env.DOC_S3_PUBLIC_DOMAIN = 'https://cdn.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5520a8a7442df1d3 — Environment-variable access.
repo/apps/server/src/services/changelog/index.ts:15 
const docCdnPrefix = process.env.DOC_S3_PUBLIC_DOMAIN || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc684e83259a8ebc — Environment-variable access.
repo/apps/server/src/services/changelog/index.ts:34 
    branch: process.env.DOCS_BRANCH || 'main',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5abd2c82db08fcd3 — Environment-variable access.
repo/apps/server/src/services/changelog/index.ts:41 
    urlTemplate: process.env.CHANGELOG_URL_TEMPLATE || URL_TEMPLATE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2720ec9dcf873cb1 — Environment-variable access.
repo/apps/server/src/services/comfyui/core/comfyUIClientService.ts:70 
        options.baseURL || process.env.COMFYUI_DEFAULT_URL || COMFYUI_DEFAULTS.BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d57f8bd1b051893 — Environment-variable access.
repo/apps/server/src/services/desktopRelease/index.ts:120 
  const token = options?.token || process.env.GITHUB_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d81a7e6689282f8 — Environment-variable access.
repo/apps/server/src/services/desktopRelease/index.ts:175 
    options?.baseUrl || process.env.DESKTOP_UPDATE_SERVER_URL || process.env.UPDATE_SERVER_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7cc0cbc6a3af29e0 — Environment-variable access.
repo/apps/server/src/services/discover/index.ts:106 
      process.env.MARKET_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f52c801d3ab4c3ec — Environment-variable access.
repo/apps/server/src/services/discover/index.ts:115 
      if (process.env.VERCEL_PROJECT_ID) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1333a0440ad727c1 — Environment-variable access.
repo/apps/server/src/services/discover/index.ts:116 
        return process.env.VERCEL_PROJECT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cdb14a7c2df7c2c2 — Environment-variable access.
repo/apps/server/src/services/gateway/GatewayManager.ts:253 
      appUrl: process.env.APP_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e6a2ef25253063a — Environment-variable access.
repo/apps/server/src/services/gateway/index.ts:105 
const isVercel = !!process.env.VERCEL_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90d8be8d62ec6847 — Filesystem access.
repo/apps/server/src/services/generation/video.ts:74 
        fs.readFile(String(tempVideoPath)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4be7010f7a1f0792 — Filesystem access.
repo/apps/server/src/services/generation/video.ts:99 
      const coverBuffer = await fs.readFile(String(tempCoverPath));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b697dfa1ae81442a — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:500 
    const originalToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #69413731e35ad02d — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:501 
    const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #988436bb6cfe6bc1 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:537 
      process.env.QSTASH_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #073669309f2f7983 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:538 
      process.env.APP_URL = 'https://app.test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f44b81931a895fb5 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:543 
      if (originalToken === undefined) delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f78751b569e78543 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:544 
      else process.env.QSTASH_TOKEN = originalToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6557ae421eb9adf8 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:545 
      if (originalAppUrl === undefined) delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3fbc3c71d5469afc — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:546 
      else process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #21f10863b0e02d86 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:594 
    const originalToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ae71f55e47940d95 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:595 
    const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6eecda40af469189 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:645 
      process.env.QSTASH_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6c9ec86bfef093e0 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:646 
      process.env.APP_URL = 'https://app.test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #27b1805efc16c706 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:652 
      if (originalToken === undefined) delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #11f9f87e7ed26fbd — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:653 
      else process.env.QSTASH_TOKEN = originalToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #31d39d2c29fa11fa — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:654 
      if (originalAppUrl === undefined) delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cd351c38cc7ddc32 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:655 
      else process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e99334cdc342ff1a — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/sandboxRunner.ts:193 
  const serverUrl = process.env.LOBEHUB_HETERO_SERVER_URL ?? appEnv.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3b07a9f3484250a — Environment-variable access.
repo/apps/server/src/services/llmGenerationTracing/index.ts:262 
  if (process.env.ENABLE_LLM_GENERATION_TRACING_S3 === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bda53903a861b2db — Environment-variable access.
repo/apps/server/src/services/llmGenerationTracing/index.ts:273 
  if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9650b424d5b2f3d0 — Environment-variable access.
repo/apps/server/src/services/market/index.ts:13 
const MARKET_BASE_URL = process.env.MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1c98ea1be6128e77 — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:65 
  const originalServiceUserId = process.env.MEMORY_EXTRACTION_HOURLY_TASK_USER_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #afb7eb06ee1acab6 — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:66 
  const originalQstashToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8b1a1dbc32ad1ce2 — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:73 
    process.env.MEMORY_EXTRACTION_HOURLY_TASK_USER_ID = 'service-account-user';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a036224805e75aa5 — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:74 
    process.env.QSTASH_TOKEN = 'test-qstash-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3bb168309717e138 — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:96 
      delete process.env.MEMORY_EXTRACTION_HOURLY_TASK_USER_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #71cf66328d74a8ae — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:98 
      process.env.MEMORY_EXTRACTION_HOURLY_TASK_USER_ID = originalServiceUserId;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7acf5f9bf7fad009 — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:102 
      delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2ae21ce392f48789 — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:104 
      process.env.QSTASH_TOKEN = originalQstashToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9602c5eaa83311e3 — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:257 
    delete process.env.MEMORY_EXTRACTION_HOURLY_TASK_USER_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2d4335e8d6ac552 — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/extract.ts:2765 
  const token = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #215dc0bf60d93cb6 — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/extract.ts:2770 
  if (process.env.QSTASH_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81ac97971d2a71d6 — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/extract.ts:2771 
    (config as Record<string, unknown>).url = process.env.QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2e3da87fd118eb8 — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/extract.ts:2844 
    const userId = process.env.MEMORY_EXTRACTION_HOURLY_TASK_USER_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #928f87a4035f5258 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/services/messenger/oauth/slackOAuth.ts:29 
  const url = new URL(SLACK_AUTHORIZE_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #cb0fe58572aafce7 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/services/messenger/platforms/discord/oauth.ts:81 
  const url = new URL(DISCORD_AUTHORIZE_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #f6a4cb5c7d9f2c86 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/services/messenger/platforms/discord/oauth.ts:108 
  const tokenResponse = await fetch(DISCORD_TOKEN_URL, {
    body,
    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
    method: 'POST',
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #80aabf0a5542b812 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/services/messenger/platforms/discord/oauth.ts:132 
    const userResponse = await fetch(`${DISCORD_API_BASE}/users/@me`, {
      headers: { Authorization: `Bearer ${data.access_token}` },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #7f0ef02d91bf3161 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/services/messenger/platforms/slack/oauth.ts:103 
  const url = new URL('https://slack.com/app/open');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only #546725b0c83436ae — Environment-variable access.
repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:128 
      delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #790ff98b551eb480 — Environment-variable access.
repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:139 
      process.env.QSTASH_TOKEN = 'test-qstash-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #46b0830475e586d2 — Environment-variable access.
repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:148 
      delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #086257aa05b418e0 — Environment-variable access.
repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:153 
      process.env.QSTASH_TOKEN = 'test-qstash-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #201bdbba85d42a7e — Environment-variable access.
repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:161 
      delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16b64314d13432e2 — Environment-variable access.
repo/apps/server/src/services/queue/impls/index.ts:26 
    const qstashToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8cc1f951e4cce2f5 — Environment-variable access.
repo/apps/server/src/services/search/impls/anspire/index.ts:21 
    return process.env.ANSPIRE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d3842d23a1d3751 — Environment-variable access.
repo/apps/server/src/services/search/impls/bocha/index.ts:28 
    return process.env.BOCHA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc0076233ecdc051 — Environment-variable access.
repo/apps/server/src/services/search/impls/brave/index.test.ts:30 
    process.env.BRAVE_API_KEY = 'test-brave-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b30bdef91309f278 — Environment-variable access.
repo/apps/server/src/services/search/impls/brave/index.test.ts:35 
    delete process.env.BRAVE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07e27926031452f3 — Environment-variable access.
repo/apps/server/src/services/search/impls/brave/index.test.ts:145 
      delete process.env.BRAVE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ef5f9d3bb9eaca3 — Environment-variable access.
repo/apps/server/src/services/search/impls/brave/index.ts:28 
    return process.env.BRAVE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0123c705cbdb86cc — Environment-variable access.
repo/apps/server/src/services/search/impls/exa/index.test.ts:27 
    process.env.EXA_API_KEY = 'test-exa-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e4e557023a8035d6 — Environment-variable access.
repo/apps/server/src/services/search/impls/exa/index.test.ts:32 
    delete process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2fc8a88cfbe7f9c — Environment-variable access.
repo/apps/server/src/services/search/impls/exa/index.test.ts:153 
      delete process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b2b4fd1e8bae860 — Environment-variable access.
repo/apps/server/src/services/search/impls/exa/index.ts:21 
    return process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #349705cfb63f2327 — Environment-variable access.
repo/apps/server/src/services/search/impls/firecrawl/index.ts:28 
    return process.env.FIRECRAWL_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc519f9eccead86c — Environment-variable access.
repo/apps/server/src/services/search/impls/firecrawl/index.ts:33 
    return process.env.FIRECRAWL_URL || 'https://api.firecrawl.dev/v2';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28cad57e54476835 — Environment-variable access.
repo/apps/server/src/services/search/impls/google/index.ts:28 
    return process.env.GOOGLE_PSE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0da4450d3b1085dc — Environment-variable access.
repo/apps/server/src/services/search/impls/google/index.ts:32 
    return process.env.GOOGLE_PSE_ENGINE_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6eb06a645d78a9d7 — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:21 
    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b34e9e689bff1557 — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:22 
    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d3540149c6c0842 — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:23 
    delete process.env.JINA_USE_CN_DOMAINS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc0ce70d923f2103 — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:28 
    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8443e977ee493d39 — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:29 
    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dcbaadef2080e71d — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:30 
    delete process.env.JINA_USE_CN_DOMAINS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf25567385058a9b — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:34 
    process.env.JINA_READER_API_KEY = 'test-jina-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #969bc10a76cf6560 — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:79 
    process.env.JINA_USE_CN_DOMAINS = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9bfff58f578159d7 — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.ts:22 
    return process.env.JINA_READER_API_KEY || process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43129ab4e0bc32c5 — Environment-variable access.
repo/apps/server/src/services/search/impls/kagi/index.ts:21 
    return process.env.KAGI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #45cda7463a003c44 — Environment-variable access.
repo/apps/server/src/services/search/impls/search1api/index.integration.test.ts:7 
const apiKey = process.env.SEARCH1API_SEARCH_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a94292f2605ffdb0 — Environment-variable access.
repo/apps/server/src/services/search/impls/search1api/index.test.ts:39 
    process.env.SEARCH1API_SEARCH_API_KEY = 'test-search1api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d8265e1590753ca — Environment-variable access.
repo/apps/server/src/services/search/impls/search1api/index.test.ts:40 
    delete process.env.SEARCH1API_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d4a49628af9fcf6 — Environment-variable access.
repo/apps/server/src/services/search/impls/search1api/index.test.ts:45 
    delete process.env.SEARCH1API_SEARCH_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc013040942accad — Environment-variable access.
repo/apps/server/src/services/search/impls/search1api/index.test.ts:46 
    delete process.env.SEARCH1API_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #366b138779dc5795 — Environment-variable access.
repo/apps/server/src/services/search/impls/search1api/index.ts:41 
    return process.env.SEARCH1API_SEARCH_API_KEY || process.env.SEARCH1API_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b564cbd67c1bbaf — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.test.ts:27 
    process.env.TAVILY_API_KEY = 'test-tavily-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #afc63c03e119fb6e — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.test.ts:28 
    delete process.env.TAVILY_SEARCH_DEPTH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36cb254d7248e0d4 — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.test.ts:33 
    delete process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4899edd745abbf3c — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.test.ts:34 
    delete process.env.TAVILY_SEARCH_DEPTH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da04d345996265c1 — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.test.ts:147 
      process.env.TAVILY_SEARCH_DEPTH = 'advanced';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #32954b9ddfbcc18c — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.test.ts:170 
      delete process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #20df973a71b36a55 — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.ts:21 
    return process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #365684ddf9f0bdde — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.ts:40 
      search_depth: process.env.TAVILY_SEARCH_DEPTH || 'basic', // basic or advanced

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #432ff33b5666b873 — Filesystem access.
repo/apps/server/src/services/skill/importer.ts:116 
      const buffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6f7ed0afbdc5e334 — Filesystem access.
repo/apps/server/src/services/skill/parser.test.ts:825 
      await writeFile(testZipPath, zipped);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e54b5eab1f391ddf — Filesystem access.
repo/apps/server/src/services/skill/parser.test.ts:851 
      await writeFile(invalidZipPath, Buffer.from([1, 2, 3, 4]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b52ffc8459fbe8ca — Filesystem access.
repo/apps/server/src/services/skill/parser.ts:61 
      const buffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #44db597a87e12e30 — Environment-variable access.
repo/apps/server/src/services/taskScheduler/impls/index.ts:24 
    const baseUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e6d2e93a941de225 — Environment-variable access.
repo/apps/server/src/services/taskTemplate/index.ts:23 
  process.env.VERCEL_PROJECT_ID || process.env.VERCEL_PROJECT_PRODUCTION_URL || appEnv.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2dd1c77dca0a9e18 — Environment-variable access.
repo/apps/server/src/services/toolExecution/serverRuntimes/agentDocuments.ts:22 
    return process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #827191f1e424faa8 — Filesystem access.
repo/apps/server/src/utils/tempFileManager.ts:29 
      writeFileSync(filePath, data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ec15244f6f90421d — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:25 
    process.env.VERCEL = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa43f7d659befd18 — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:26 
    process.env.VERCEL_ENV = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b60ac9928f30272e — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:35 
    process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d99c22f006a04cb — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:36 
    process.env.VERCEL_ENV = 'preview';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #14bf01d6fa69d4fd — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:37 
    process.env.VERCEL_URL = 'preview-url.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #50700709b636b09f — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:46 
    process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e4a87dca95ef5ac2 — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:47 
    process.env.VERCEL_ENV = 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #125a535acf804fb8 — Environment-variable access.
repo/apps/server/src/utils/url.ts:3 
const isVercelPreview = process.env.VERCEL === '1' && process.env.VERCEL_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5940e3a1459c1d5b — Environment-variable access.
repo/apps/server/src/utils/url.ts:5 
const vercelPreviewUrl = `https://${process.env.VERCEL_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5a7a782c59fe338f — Environment-variable access.
repo/apps/server/src/workflows-hono/middlewares/qstashAuth.ts:27 
  if (process.env.QSTASH_CURRENT_SIGNING_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ba4650fb8ca3748 — Environment-variable access.
repo/apps/server/src/workflows-hono/qstashClient.ts:13 
    token: process.env.QSTASH_TOKEN!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1841930abb05124 — Environment-variable access.
repo/apps/server/src/workflows-hono/task/handlers/scheduleDispatch.ts:106 
    if (!process.env.APP_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ddfcde1e7c1eee8 — Environment-variable access.
repo/apps/server/src/workflows-hono/task/handlers/scheduleDispatch.ts:109 
    const url = `${process.env.APP_URL.replace(/\/$/, '')}${SCHEDULE_EXECUTE_PATH}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #efcd309b7a393597 — Environment-variable access.
repo/apps/server/src/workflows/agentEvalRun/index.ts:127 
  const baseUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #286f91bce030b8a6 — Environment-variable access.
repo/apps/server/src/workflows/agentSignal/run.ts:104 
  if (process.env.NODE_ENV !== 'development') return null;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #18480ff46620535a — Environment-variable access.
repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:6 
  const originalQstashToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #99504d81562b588f — Environment-variable access.
repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:7 
  const originalQstashUrl = process.env.QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7f9010b948590e26 — Environment-variable access.
repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:10 
    process.env.QSTASH_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #acd1cf50cc696f30 — Environment-variable access.
repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:11 
    delete process.env.QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #abfa3f6a8422ce01 — Environment-variable access.
repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:21 
    if (originalQstashToken === undefined) delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6cc9d6b2f8c53c38 — Environment-variable access.
repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:22 
    else process.env.QSTASH_TOKEN = originalQstashToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #140a611c24a69090 — Environment-variable access.
repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:24 
    if (originalQstashUrl === undefined) delete process.env.QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d9a27d49b68e742b — Environment-variable access.
repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:25 
    else process.env.QSTASH_URL = originalQstashUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b98e1c5ff6b0a337 — Environment-variable access.
repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:136 
    delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f2de9e8a545fb0cc — Environment-variable access.
repo/apps/server/src/workflows/runGuard/qstashCancel.ts:79 
  const token = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89cbd561b6208d2c — Environment-variable access.
repo/apps/server/src/workflows/runGuard/qstashCancel.ts:83 
  const qstashUrl = process.env.QSTASH_URL || DEFAULT_QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c281a090ddd323b — Filesystem access.
repo/apps/server/viteNodeServer.config.ts:22 
    return `export default ${JSON.stringify(readFileSync(filepath, 'utf8'))};`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/model-runtime

npm first-party
high pii_flow production #739735b72dc3a29f — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:49 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:51 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:49 
  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #40bff9aa58291d72 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:164 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:167 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:164 
  const response = await fetch(`${baseURL}/videos`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #bb71c6e960464f77 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/aihubmix/index.ts:181 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/aihubmix/index.ts:163 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/aihubmix/index.ts:181 
      const response = await fetch(urlJoin(rootBaseURL, '/api/v1/models'), {
        headers: {
          'Authorization': `Bearer ${apiKey}`,
          'APP-Code': 'LobeHub',
        },
        signal: controller.signal,
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #6ecf63cdd7472ab0 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/azureai/index.ts:67 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/azureai/index.ts:33 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/azureai/index.ts:67 
      const response = this.client.path('/chat/completions').post({
        body: {
          messages: updatedMessages as OpenAI.ChatCompletionMessageParam[],
          model,
          ...params,
          stream: enableStreaming,
          temperature: model.includes('o3') || model.includes('o4') ? undefined : temperature,
          tool_choice: params.tools ? 'auto' : undefined,
          top_p: model.includes('o3') || model.includes('o4') ? undefined : top_p,
        },
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #33ef9db5decb19d9 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/bfl/createImage.ts:121 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/bfl/createImage.ts:125 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/bfl/createImage.ts:121 
  const response = await fetch(url, {
    body: JSON.stringify(payload),
    headers: {
      'Content-Type': 'application/json',
      'x-key': options.apiKey,
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #e4739285b3f4f11d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/bfl/createImage.ts:158 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/bfl/createImage.ts:161 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/bfl/createImage.ts:158 
  const response = await fetch(pollingUrl, {
    headers: {
      'accept': 'application/json',
      'x-key': options.apiKey,
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #f0274708097c6b54 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/cloudflare/index.ts:93 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/cloudflare/index.ts:77 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/cloudflare/index.ts:93 
      response = await fetch(url, {
        body: JSON.stringify({ tools: functions, ...restPayload }),
        headers: { 'Content-Type': 'application/json', ...headers },
        method: 'POST',
        signal: options?.signal,
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #cbd211998efd8686 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/cloudflare/index.ts:156 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/cloudflare/index.ts:77 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/cloudflare/index.ts:156 
    const response = await fetch(url, {
      headers: {
        'Authorization': `Bearer ${this.apiKey}`,
        'Content-Type': 'application/json',
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #879eaff0861b5317 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/comfyui/index.ts:101 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/comfyui/index.ts:77 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/comfyui/index.ts:101 
      const response = await fetch(`${appUrl}/webapi/create-image/comfyui`, {
        body: JSON.stringify({
          model: payload.model,
          options: this.options,
          params: payload.params,
        }),
        headers,
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #d1826a5efa4d8a7b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/google/index.ts:471 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/google/index.ts:135 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/google/index.ts:471 
      const response = await fetch(url, {
        headers: {
          'x-goog-api-key': this.apiKey!,
        },
        method: 'GET',
        signal: options?.signal,
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #9200db5f3c71f883 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/minimax/createVideo.ts:53 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:55 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:53 
  const response = await fetch(urlWithParams.toString(), {
    headers: {
      Authorization: `Bearer ${options.apiKey}`,
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #1b52094bff29bf0b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/minimax/createVideo.ts:76 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:78 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:76 
  const response = await fetch(urlWithParams.toString(), {
    headers: {
      Authorization: `Bearer ${options.apiKey}`,
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #d1db657faabdaa53 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/minimax/createVideo.ts:174 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:177 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:174 
  const response = await fetch(`${baseURL}/video_generation`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #5c70dc8e32e48d1d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/nebius/index.ts:31 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/nebius/index.ts:34 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/nebius/index.ts:31 
    const res = await fetch(url, {
      headers: {
        Accept: 'application/json',
        Authorization: `Bearer ${client.apiKey}`,
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #4be7abe487cc3c0b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:38 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:41 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:38 
  const response = await fetch(statusUrl, {
    body: JSON.stringify({ requestId }),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #c3908b4ea596249d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:123 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:126 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:123 
  const response = await fetch(`${baseURL}/video/submit`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #5e0a95f55f5e8a95 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/straico/index.ts:44 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/straico/index.ts:46 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/straico/index.ts:44 
    const response = await fetch(url, {
      headers: {
        Authorization: `Bearer ${client.apiKey}`,
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #40c241236fe04464 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:75 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:78 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:75 
  const response = await fetch(`${baseURL}/contents/generations/tasks`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #e14e9dbb44edc4bb — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:35 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:37 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:35 
  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #0ea72e7f6ae60e77 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:134 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:137 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:134 
  const response = await fetch(`${baseURL}/video/generations`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #1fd96c322df10e2a — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/xai/createVideo.ts:33 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/xai/createVideo.ts:35 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/xai/createVideo.ts:33 
  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #072d0b970eaed2ee — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/xai/createVideo.ts:124 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/xai/createVideo.ts:127 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/xai/createVideo.ts:124 
  const response = await fetch(`${baseURL}/videos/generations`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #7b72b67afb0bda54 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createImage.ts:37 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/zhipu/createImage.ts:39 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/zhipu/createImage.ts:37 
  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #0d78e97ae283bd63 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createImage.ts:131 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/zhipu/createImage.ts:134 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/zhipu/createImage.ts:131 
  const response = await fetch(endpoint, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #75c130359eabeaea — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:39 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:41 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:39 
  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #1a0672e90cbf94da — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:144 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:147 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:144 
  const response = await fetch(`${baseURL}/videos/generations`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #2c230998b8afd2ad — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/index.ts:220 · flow /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/zhipu/index.ts:222 → /tmp/closeopen-9mgsdxzw/repo/packages/model-runtime/src/providers/zhipu/index.ts:220 
    const response = await fetch(url, {
      headers: {
        'Authorization': `Bearer ${client.apiKey}`,
        'Bigmodel-Organization': 'lobehub',
        'Bigmodel-Project': 'lobechat',
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 382 low-confidence finding(s)
low env_fs production #88c804a53c363735 — Environment-variable access.
repo/packages/model-runtime/src/core/RouterRuntime/createRuntime.ts:265 
      if (process.env.NODE_ENV !== 'development') return effectiveUserId;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86c19b38c02a6e83 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:25 
const originalAnthropicClientTimeout = process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd725cd295a00bbc — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:29 
    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #283675af2966a07f — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:31 
    process.env.ANTHROPIC_CLIENT_TIMEOUT = originalAnthropicClientTimeout;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0fffe99085b6465 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:68 
    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eec7ebec533727ef — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:81 
    process.env.ANTHROPIC_CLIENT_TIMEOUT = '780000';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d463d2d33945366b — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:91 
    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #480c5ba4d2c404e1 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:96 
    process.env.ANTHROPIC_CLIENT_TIMEOUT = 'invalid';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f58b60811d8166f7 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:106 
    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8fd080a40a205a1e — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:111 
    process.env.ANTHROPIC_CLIENT_TIMEOUT = '780000';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a3bf173290e77f62 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:124 
    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eec2ee9314fa3d75 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.ts:66 
  const timeout = Number(process.env[ANTHROPIC_CLIENT_TIMEOUT_ENV]);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4930dd9a8136a117 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.ts:275 
  const betaHeaders = process.env.ANTHROPIC_BETA_HEADERS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d20c82bd248694e — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/anthropic.ts:479 
  const maxUses = process.env.ANTHROPIC_MAX_USES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #55b6816af59d2bf2 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:39 
    process.env.LLM_VISION_IMAGE_USE_BASE64 = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a63a220ca1db9ba — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:64 
    process.env.LLM_VISION_IMAGE_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #617ada20050c6f0e — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:80 
    process.env.LLM_VISION_IMAGE_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #392c0160e4e1976f — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:104 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #438578125846b825 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:127 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db4f1dbbe84ed8a5 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:131 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #661c32131dc549b4 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:147 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf6cdbc894a97440 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:171 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #66ada825fbb65fea — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:185 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d18d5d3b50934fc — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:219 
    process.env.LLM_VISION_IMAGE_USE_BASE64 = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e2d375d3538010fc — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:238 
    process.env.LLM_VISION_IMAGE_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07e48ea87909b61d — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:1055 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e84fb3c18e1b649c — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:1097 
    process.env.LLM_VISION_IMAGE_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0219f591b217d54d — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.ts:43 
      options?.forceImageBase64 || process.env.LLM_VISION_IMAGE_USE_BASE64 === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #211becf8e780cd20 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.ts:59 
      options?.forceVideoBase64 || process.env.LLM_VISION_VIDEO_USE_BASE64 === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bfe08993de59b025 — Environment-variable access.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/index.test.ts:43 
    chatCompletion: () => process.env.DEBUG_MOCKPROVIDER_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c4fb23fe567c1051 — Environment-variable access.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/index.test.ts:1664 
        const originalDebugValue = process.env.DEBUG_MOCKPROVIDER_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9c5e87462a796f33 — Environment-variable access.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/index.test.ts:1667 
        process.env.DEBUG_MOCKPROVIDER_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f128f7b79793c95 — Environment-variable access.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/index.test.ts:1683 
        process.env.DEBUG_MOCKPROVIDER_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #65796b156cf203e7 — Environment-variable access.
repo/packages/model-runtime/src/providerTestUtils.ts:338 
          const originalDebugValue = process.env[debugEnv];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d552ca6488db37b — Environment-variable access.
repo/packages/model-runtime/src/providerTestUtils.ts:340 
          process.env[debugEnv] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #690e603804423733 — Environment-variable access.
repo/packages/model-runtime/src/providerTestUtils.ts:356 
          process.env[debugEnv] = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a04a828d72437dec — Environment-variable access.
repo/packages/model-runtime/src/providers/ai21/index.ts:16 
    chatCompletion: () => process.env.DEBUG_AI21_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7dcf1c1782892980 — Environment-variable access.
repo/packages/model-runtime/src/providers/ai302/index.ts:36 
    chatCompletion: () => process.env.DEBUG_AI302_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ec738412b9a74a2 — Environment-variable access.
repo/packages/model-runtime/src/providers/ai360/index.test.ts:34 
      delete process.env.DEBUG_AI360_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #911c5780bea93e63 — Environment-variable access.
repo/packages/model-runtime/src/providers/ai360/index.test.ts:40 
      process.env.DEBUG_AI360_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e9a1cb7fd398102a — Environment-variable access.
repo/packages/model-runtime/src/providers/ai360/index.test.ts:43 
      delete process.env.DEBUG_AI360_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #950ee465030080a0 — Environment-variable access.
repo/packages/model-runtime/src/providers/ai360/index.test.ts:47 
      process.env.DEBUG_AI360_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2067ce86caa043fc — Environment-variable access.
repo/packages/model-runtime/src/providers/ai360/index.test.ts:50 
      delete process.env.DEBUG_AI360_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4b9a2e4f630fbe51 — Environment-variable access.
repo/packages/model-runtime/src/providers/ai360/index.ts:39 
    chatCompletion: () => process.env.DEBUG_AI360_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4427c2a1c9f6d99e — Environment-variable access.
repo/packages/model-runtime/src/providers/aihubmix/index.ts:156 
    chatCompletion: () => process.env.DEBUG_AIHUBMIX_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17add36a9d22b741 — Environment-variable access.
repo/packages/model-runtime/src/providers/akashchat/index.test.ts:68 
      delete process.env.DEBUG_AKASH_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d03f393c713e4cea — Environment-variable access.
repo/packages/model-runtime/src/providers/akashchat/index.test.ts:74 
      process.env.DEBUG_AKASH_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f9f3ebe3ad93583f — Environment-variable access.
repo/packages/model-runtime/src/providers/akashchat/index.test.ts:77 
      delete process.env.DEBUG_AKASH_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #217f648527147602 — Environment-variable access.
repo/packages/model-runtime/src/providers/akashchat/index.test.ts:81 
      process.env.DEBUG_AKASH_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3aaf092f5f9ebf57 — Environment-variable access.
repo/packages/model-runtime/src/providers/akashchat/index.test.ts:84 
      delete process.env.DEBUG_AKASH_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07b04b1c1e118b98 — Environment-variable access.
repo/packages/model-runtime/src/providers/akashchat/index.ts:36 
    chatCompletion: () => process.env.DEBUG_AKASH_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b371e3ff8289b34 — Environment-variable access.
repo/packages/model-runtime/src/providers/antgroup/index.ts:22 
    chatCompletion: () => process.env.DEBUG_ANTGROUP_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #130bb1bc2c3df7f2 — Environment-variable access.
repo/packages/model-runtime/src/providers/anthropic/index.test.ts:262 
      const originalDebugValue = process.env.DEBUG_ANTHROPIC_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d684fbd8b6fef5e8 — Environment-variable access.
repo/packages/model-runtime/src/providers/anthropic/index.test.ts:264 
      process.env.DEBUG_ANTHROPIC_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3108d336cb2634e6 — Environment-variable access.
repo/packages/model-runtime/src/providers/anthropic/index.test.ts:278 
      process.env.DEBUG_ANTHROPIC_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5cfa5cc8d5785011 — Environment-variable access.
repo/packages/model-runtime/src/providers/anthropic/index.ts:23 
    chatCompletion: () => process.env.DEBUG_ANTHROPIC_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2389215cf98e9f6 — Environment-variable access.
repo/packages/model-runtime/src/providers/azureOpenai/index.test.ts:436 
        process.env.DEBUG_AZURE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc80a1de01834978 — Environment-variable access.
repo/packages/model-runtime/src/providers/azureOpenai/index.test.ts:451 
        delete process.env.DEBUG_AZURE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b7b63ae41d7215f1 — Environment-variable access.
repo/packages/model-runtime/src/providers/azureOpenai/index.ts:19 
const azureSearchContextSize = process.env.OPENAI_SEARCH_CONTEXT_SIZE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ffe808926154db5 — Environment-variable access.
repo/packages/model-runtime/src/providers/azureOpenai/index.ts:141 
    chatCompletion: () => process.env.DEBUG_AZURE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #767cb2988303dde8 — Environment-variable access.
repo/packages/model-runtime/src/providers/azureOpenai/index.ts:142 
    responses: () => process.env.DEBUG_AZURE_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ee62d54e03bb953 — Environment-variable access.
repo/packages/model-runtime/src/providers/azureai/index.ts:115 
        if (process.env.DEBUG_AZURE_AI_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #96149df992107f3e — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.test.ts:45 
      delete process.env.DEBUG_BAICHUAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #45789c1e88515b54 — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.test.ts:51 
      process.env.DEBUG_BAICHUAN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #02c7bfc5b8320a52 — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.test.ts:54 
      delete process.env.DEBUG_BAICHUAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #54cd1e98fe5a0ba0 — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.test.ts:110 
      delete process.env.BAICHUAN_SEARCH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aed615ff189e7258 — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.test.ts:124 
      process.env.BAICHUAN_SEARCH_MODE = 'quality_first';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e0716727820fcb1 — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.test.ts:136 
      delete process.env.BAICHUAN_SEARCH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8fd7e3fbe9450ff2 — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.ts:30 
                search_mode: process.env.BAICHUAN_SEARCH_MODE || 'performance_first', // performance_first or quality_first

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9359f18278da6cac — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.ts:56 
    chatCompletion: () => process.env.DEBUG_BAICHUAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1451d4695dda8ef0 — Environment-variable access.
repo/packages/model-runtime/src/providers/bailianCodingPlan/index.ts:45 
    chatCompletion: () => process.env.DEBUG_BAILIAN_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3bf836a970c3b10b — Environment-variable access.
repo/packages/model-runtime/src/providers/bedrock/index.test.ts:569 
        process.env.DEBUG_BEDROCK_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fefd732e3a53a14e — Environment-variable access.
repo/packages/model-runtime/src/providers/bedrock/index.test.ts:583 
        delete process.env.DEBUG_BEDROCK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d16df992936ce79 — Environment-variable access.
repo/packages/model-runtime/src/providers/bedrock/index.test.ts:973 
        process.env.DEBUG_BEDROCK_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5fb14b8e8509d26 — Environment-variable access.
repo/packages/model-runtime/src/providers/bedrock/index.test.ts:987 
        delete process.env.DEBUG_BEDROCK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f6c6b7075ab23d96 — Environment-variable access.
repo/packages/model-runtime/src/providers/bedrock/index.ts:372 
      if (process.env.DEBUG_BEDROCK_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0b641bbaeb3d199 — Environment-variable access.
repo/packages/model-runtime/src/providers/bedrock/index.ts:433 
      if (process.env.DEBUG_BEDROCK_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a9a83a81cb5734f0 — Environment-variable access.
repo/packages/model-runtime/src/providers/cerebras/index.test.ts:66 
      delete process.env.DEBUG_CEREBRAS_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36d078d8a4a27327 — Environment-variable access.
repo/packages/model-runtime/src/providers/cerebras/index.test.ts:72 
      process.env.DEBUG_CEREBRAS_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0d6a81c7e1fe4f9 — Environment-variable access.
repo/packages/model-runtime/src/providers/cerebras/index.test.ts:78 
      process.env.DEBUG_CEREBRAS_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c9a00e0d1af92ebf — Environment-variable access.
repo/packages/model-runtime/src/providers/cerebras/index.test.ts:84 
      process.env.DEBUG_CEREBRAS_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd0bf1bf777cfd9e — Environment-variable access.
repo/packages/model-runtime/src/providers/cerebras/index.ts:25 
    chatCompletion: () => process.env.DEBUG_CEREBRAS_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae67197bd9409cb3 — Environment-variable access.
repo/packages/model-runtime/src/providers/cloudflare/index.test.ts:255 
      const originalDebugValue = process.env.DEBUG_CLOUDFLARE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a9fd844323f8f05e — Environment-variable access.
repo/packages/model-runtime/src/providers/cloudflare/index.test.ts:257 
      process.env.DEBUG_CLOUDFLARE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d41f251cb5099c9 — Environment-variable access.
repo/packages/model-runtime/src/providers/cloudflare/index.test.ts:271 
      process.env.DEBUG_CLOUDFLARE_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd0deac40e06736d — Environment-variable access.
repo/packages/model-runtime/src/providers/cloudflare/index.ts:136 
    if (process.env.DEBUG_CLOUDFLARE_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b312cca2996bf8d — Environment-variable access.
repo/packages/model-runtime/src/providers/cohere/index.test.ts:44 
      delete process.env.DEBUG_COHERE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #801e5e29eefc2e77 — Environment-variable access.
repo/packages/model-runtime/src/providers/cohere/index.test.ts:50 
      process.env.DEBUG_COHERE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #45434fd40fc53997 — Environment-variable access.
repo/packages/model-runtime/src/providers/cohere/index.test.ts:53 
      delete process.env.DEBUG_COHERE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f28159d8782c3c43 — Environment-variable access.
repo/packages/model-runtime/src/providers/cohere/index.ts:42 
    chatCompletion: () => process.env.DEBUG_COHERE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #278b09835494f275 — Environment-variable access.
repo/packages/model-runtime/src/providers/cometapi/index.test.ts:49 
      delete process.env.DEBUG_COMETAPI_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5045ee246b2d94d4 — Environment-variable access.
repo/packages/model-runtime/src/providers/cometapi/index.test.ts:55 
      process.env.DEBUG_COMETAPI_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7d76d46268fe1cf — Environment-variable access.
repo/packages/model-runtime/src/providers/cometapi/index.test.ts:58 
      delete process.env.DEBUG_COMETAPI_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d3d28ee6ae778e9e — Environment-variable access.
repo/packages/model-runtime/src/providers/cometapi/index.ts:27 
    chatCompletion: () => process.env.DEBUG_COMETAPI_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #499386af9f82fb64 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:49 
      const originalEnv = process.env.COMFYUI_DEFAULT_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6b764965d60249eb — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:50 
      process.env.COMFYUI_DEFAULT_URL = 'https://env.comfyui.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #39ac15ee35500784 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:58 
        delete process.env.COMFYUI_DEFAULT_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2d6d9b48b2088b1d — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:60 
        process.env.COMFYUI_DEFAULT_URL = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5dd7e959a7980cb3 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:202 
      const originalInternalAppUrl = process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7a431c20bfa52d15 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:203 
      const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #710e006bb7be6edc — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:204 
      delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a07fe2b55ef0fb00 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:205 
      process.env.APP_URL = 'http://localhost:3010';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d903caf264eb5d58 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:237 
        delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fbda56ede1a32c6e — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:239 
        process.env.INTERNAL_APP_URL = originalInternalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e3f9a497a72c03cf — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:242 
        delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8f336ce33717c847 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:244 
        process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #faacbed77f3a5cab — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:261 
      const originalInternalAppUrl = process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #67e120f85fba729c — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:262 
      const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c895e7871e638719 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:263 
      process.env.INTERNAL_APP_URL = 'http://internal-service:3210';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ade88e8e17adc27f — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:264 
      process.env.APP_URL = 'https://public.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e2d73c2349759d66 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:274 
        delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #538ab8513bbb6e23 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:276 
        process.env.INTERNAL_APP_URL = originalInternalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #835403cd6b4a43c3 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:279 
        delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b72d75a77f36e0ef — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:281 
        process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b70a98a5c66f1db1 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:300 
      const originalInternalAppUrl = process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2570d0f65025d737 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:301 
      const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b94400599c0d7bb0 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:302 
      const originalPort = process.env.PORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #82a99a14393751bb — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:303 
      delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #65c32724878ac9b6 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:304 
      delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0e1ee2bd931d0d05 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:305 
      process.env.PORT = '3000';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c3eeb816f609d2c1 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:317 
        process.env.INTERNAL_APP_URL = originalInternalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8cab2525a23eb991 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:320 
        process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5145542ae39816c2 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:323 
        delete process.env.PORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c776128cb33e54be — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:325 
        process.env.PORT = originalPort;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #547db53adcc7db22 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:344 
      const originalInternalAppUrl = process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #df95b9546ad6a590 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:345 
      const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1d9ca9a19d1c779b — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:346 
      const originalPort = process.env.PORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0827a467c19002db — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:347 
      delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2f4d905d71a3f64d — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:348 
      delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bcefb0c0f14b125e — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:349 
      delete process.env.PORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #56dcb6c6efae7bc1 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:361 
        process.env.INTERNAL_APP_URL = originalInternalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #23ddbf1add91f9e8 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:364 
        process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ce3f0724e324269e — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:367 
        process.env.PORT = originalPort;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #817f5093da3dec56 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:28 
    this.baseURL = options.baseURL || process.env.COMFYUI_DEFAULT_URL || 'http://localhost:8188';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #49d1d42336fbc259 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:76 
      const isInVercel = process.env.VERCEL === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #edca944ccc6dca77 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:77 
      const vercelUrl = `https://${process.env.VERCEL_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c388f60721cf86a7 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:79 
        process.env.INTERNAL_APP_URL ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #174c988b7069135a — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:80 
        process.env.APP_URL ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4fddce302799ace7 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:81 
        (isInVercel ? vercelUrl : `http://localhost:${process.env.PORT || 3010}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0bc97e7612ef76f2 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:90 
      if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #69d1c5330d731812 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:96 
      const keyVaultSecret = process.env.KEY_VAULTS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #910f0b86a4f1516b — Environment-variable access.
repo/packages/model-runtime/src/providers/deepseek/__tests__/index.test.ts:158 
    delete process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a681c0f7d9448a8c — Environment-variable access.
repo/packages/model-runtime/src/providers/deepseek/__tests__/index.test.ts:164 
    process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f0fcaa252100625a — Environment-variable access.
repo/packages/model-runtime/src/providers/deepseek/__tests__/index.test.ts:167 
    delete process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ebe2564b4ee4aa0a — Environment-variable access.
repo/packages/model-runtime/src/providers/deepseek/index.ts:46 
    chatCompletion: () => process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ecf09a33a5a8e36f — Environment-variable access.
repo/packages/model-runtime/src/providers/deepseek/index.ts:64 
    chatCompletion: () => process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1ee3c85901bf43d — Environment-variable access.
repo/packages/model-runtime/src/providers/fireworksai/index.test.ts:40 
      delete process.env.DEBUG_FIREWORKSAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e648ee77b3f21c04 — Environment-variable access.
repo/packages/model-runtime/src/providers/fireworksai/index.test.ts:44 
      process.env.DEBUG_FIREWORKSAI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #21a6acea65f03ef8 — Environment-variable access.
repo/packages/model-runtime/src/providers/fireworksai/index.test.ts:48 
      delete process.env.DEBUG_FIREWORKSAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dbb5e75e94f4e5ee — Environment-variable access.
repo/packages/model-runtime/src/providers/fireworksai/index.ts:17 
    chatCompletion: () => process.env.DEBUG_FIREWORKSAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #10781bdbea693a9b — Environment-variable access.
repo/packages/model-runtime/src/providers/giteeai/index.test.ts:55 
      delete process.env.DEBUG_GITEE_AI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4ac0c5a02e862f19 — Environment-variable access.
repo/packages/model-runtime/src/providers/giteeai/index.test.ts:61 
      process.env.DEBUG_GITEE_AI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c730128daac74108 — Environment-variable access.
repo/packages/model-runtime/src/providers/giteeai/index.test.ts:67 
      process.env.DEBUG_GITEE_AI_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #04b5b7804cf0a6b6 — Environment-variable access.
repo/packages/model-runtime/src/providers/giteeai/index.test.ts:73 
      process.env.DEBUG_GITEE_AI_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #15bb7430d70be190 — Environment-variable access.
repo/packages/model-runtime/src/providers/giteeai/index.ts:14 
    chatCompletion: () => process.env.DEBUG_GITEE_AI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #385cbd1607ce3c4d — Environment-variable access.
repo/packages/model-runtime/src/providers/github/index.test.ts:48 
      delete process.env.DEBUG_GITHUB_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #64de90288a815798 — Environment-variable access.
repo/packages/model-runtime/src/providers/github/index.test.ts:54 
      process.env.DEBUG_GITHUB_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ff6c1e454b9c25f — Environment-variable access.
repo/packages/model-runtime/src/providers/github/index.test.ts:57 
      delete process.env.DEBUG_GITHUB_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2447eaa4eb4ada87 — Environment-variable access.
repo/packages/model-runtime/src/providers/github/index.test.ts:61 
      process.env.DEBUG_GITHUB_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d6cb7c88b9c43f4b — Environment-variable access.
repo/packages/model-runtime/src/providers/github/index.test.ts:64 
      delete process.env.DEBUG_GITHUB_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f771c8574e0fec8c — Environment-variable access.
repo/packages/model-runtime/src/providers/github/index.ts:47 
    chatCompletion: () => process.env.DEBUG_GITHUB_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #218a6db5d0191cad — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/github/index.ts:54 
    const response = await fetch('https://models.github.ai/catalog/models');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #83408d67fd9b2fbb — Environment-variable access.
repo/packages/model-runtime/src/providers/githubCopilot/index.test.ts:389 
      process.env.DEBUG_GITHUBCOPILOT_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d9bdc67f0c31a7f — Environment-variable access.
repo/packages/model-runtime/src/providers/githubCopilot/index.test.ts:411 
      delete process.env.DEBUG_GITHUBCOPILOT_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #32e7c20327552524 — Environment-variable access.
repo/packages/model-runtime/src/providers/githubCopilot/index.test.ts:436 
      process.env.DEBUG_GITHUBCOPILOT_RESPONSES = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05d7674160260dcd — Environment-variable access.
repo/packages/model-runtime/src/providers/githubCopilot/index.test.ts:458 
      delete process.env.DEBUG_GITHUBCOPILOT_RESPONSES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1f630d7c6c0477e — Environment-variable access.
repo/packages/model-runtime/src/providers/githubCopilot/index.ts:32 
  chatCompletion: () => process.env.DEBUG_GITHUBCOPILOT_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #314d180b17f382d6 — Environment-variable access.
repo/packages/model-runtime/src/providers/githubCopilot/index.ts:33 
  responses: () => process.env.DEBUG_GITHUBCOPILOT_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #128aad9eb58d0096 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/githubCopilot/index.ts:79 
    const response = await fetch(TOKEN_EXCHANGE_URL, {
      headers: {
        'Accept': 'application/json',
        'Authorization': `Token ${githubToken}`,
        'User-Agent': 'LobeChat/1.0',
      },
      method: 'GET',
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #067f56fdffe839c7 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/githubCopilot/index.ts:402 
        const response = await fetch(`${COPILOT_BASE_URL}/models`, {
          headers: {
            'Accept': 'application/json',
            'Authorization': `Bearer ${bearerToken}`,
            'Copilot-Integration-Id': 'vscode-chat',
            'Editor-Plugin-Version': 'LobeChat/1.0',
            'Editor-Version': 'LobeChat/1.0',
          },
          method: 'GET',
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #c2e1bcadd11b3a21 — Environment-variable access.
repo/packages/model-runtime/src/providers/glmCodingPlan/index.ts:28 
    chatCompletion: () => process.env.DEBUG_GLM_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93415e16124e703f — Environment-variable access.
repo/packages/model-runtime/src/providers/google/index.test.ts:163 
      process.env.DEBUG_GOOGLE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ad08c4fe3468f8b — Environment-variable access.
repo/packages/model-runtime/src/providers/google/index.test.ts:188 
      delete process.env.DEBUG_GOOGLE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1e8fb89359aed3c5 — Environment-variable access.
repo/packages/model-runtime/src/providers/google/index.ts:230 
      if (process.env[key] === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8afa31a96d66f364 — Environment-variable access.
repo/packages/model-runtime/src/providers/google/index.ts:240 
      if (process.env[key] === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac4fb324db3dbeea — Environment-variable access.
repo/packages/model-runtime/src/providers/groq/index.test.ts:487 
      delete process.env.DEBUG_GROQ_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8fd625eec4a3b2ca — Environment-variable access.
repo/packages/model-runtime/src/providers/groq/index.test.ts:493 
      process.env.DEBUG_GROQ_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #535b7878a6b9064a — Environment-variable access.
repo/packages/model-runtime/src/providers/groq/index.test.ts:496 
      delete process.env.DEBUG_GROQ_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46c558d33c4adf6a — Environment-variable access.
repo/packages/model-runtime/src/providers/groq/index.ts:82 
    chatCompletion: () => process.env.DEBUG_GROQ_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe88ed14375d3270 — Environment-variable access.
repo/packages/model-runtime/src/providers/higress/index.ts:27 
    chatCompletion: () => process.env.DEBUG_HIGRESS_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c7de0ffd1399f19 — Environment-variable access.
repo/packages/model-runtime/src/providers/huggingface/index.test.ts:78 
      delete process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba239e2c1139eb7d — Environment-variable access.
repo/packages/model-runtime/src/providers/huggingface/index.test.ts:84 
      process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1856e1d487cc51d7 — Environment-variable access.
repo/packages/model-runtime/src/providers/huggingface/index.test.ts:87 
      delete process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3bb3016d0d851d6e — Environment-variable access.
repo/packages/model-runtime/src/providers/huggingface/index.test.ts:91 
      process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #58c64898f8a8e99b — Environment-variable access.
repo/packages/model-runtime/src/providers/huggingface/index.test.ts:94 
      delete process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #39527f297dd5ecda — Environment-variable access.
repo/packages/model-runtime/src/providers/huggingface/index.ts:54 
    chatCompletion: () => process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #f83b829c1ffe46cd — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/huggingface/index.ts:57 
    const response = await fetch('https://router.huggingface.co/v1/models');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #bef7b4e146984dcc — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:51 
      delete process.env.DEBUG_HUNYUAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #74c2159e9bd18088 — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:57 
      process.env.DEBUG_HUNYUAN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #55ac70a4f93b87a0 — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:60 
      delete process.env.DEBUG_HUNYUAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af07ba0ad884fe99 — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:144 
      process.env.HUNYUAN_ENABLE_SPEED_SEARCH = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5312dc4c44e1ad1c — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:156 
      delete process.env.HUNYUAN_ENABLE_SPEED_SEARCH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #735af3ce3a39d8e1 — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.ts:56 
          enable_speed_search: process.env.HUNYUAN_ENABLE_SPEED_SEARCH === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3627f588f8126a4 — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.ts:69 
    chatCompletion: () => process.env.DEBUG_HUNYUAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #056b1a3d43f05478 — Environment-variable access.
repo/packages/model-runtime/src/providers/infiniai/index.ts:24 
    chatCompletion: () => process.env.DEBUG_INFINIAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eaf6a16bac483daa — Environment-variable access.
repo/packages/model-runtime/src/providers/internlm/index.test.ts:43 
      delete process.env.DEBUG_INTERNLM_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd25e3f110aad38e — Environment-variable access.
repo/packages/model-runtime/src/providers/internlm/index.test.ts:49 
      process.env.DEBUG_INTERNLM_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dabc9da2c0a0f50e — Environment-variable access.
repo/packages/model-runtime/src/providers/internlm/index.test.ts:52 
      delete process.env.DEBUG_INTERNLM_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad883f3390870037 — Environment-variable access.
repo/packages/model-runtime/src/providers/internlm/index.ts:26 
    chatCompletion: () => process.env.DEBUG_INTERNLM_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9c65707abf79c6b5 — Environment-variable access.
repo/packages/model-runtime/src/providers/jina/index.test.ts:40 
      delete process.env.DEBUG_JINA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98476d5568fbec88 — Environment-variable access.
repo/packages/model-runtime/src/providers/jina/index.test.ts:44 
      process.env.DEBUG_JINA_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d9b86198e87e474 — Environment-variable access.
repo/packages/model-runtime/src/providers/jina/index.test.ts:48 
      delete process.env.DEBUG_JINA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #349a5f6ac38b3858 — Environment-variable access.
repo/packages/model-runtime/src/providers/jina/index.ts:14 
    chatCompletion: () => process.env.DEBUG_JINA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c3dbcda0055f9e9e — Environment-variable access.
repo/packages/model-runtime/src/providers/kimiCodingPlan/index.test.ts:549 
      const originalDebugValue = process.env.DEBUG_KIMI_CODING_PLAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac31e27afe4f092f — Environment-variable access.
repo/packages/model-runtime/src/providers/kimiCodingPlan/index.test.ts:551 
      process.env.DEBUG_KIMI_CODING_PLAN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6e8b7fbdcda910e0 — Environment-variable access.
repo/packages/model-runtime/src/providers/kimiCodingPlan/index.test.ts:565 
      process.env.DEBUG_KIMI_CODING_PLAN_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0067c42a0bba7c04 — Environment-variable access.
repo/packages/model-runtime/src/providers/kimiCodingPlan/index.ts:105 
    chatCompletion: () => process.env.DEBUG_KIMI_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #606071a1710dd432 — Environment-variable access.
repo/packages/model-runtime/src/providers/lmstudio/index.test.ts:47 
      delete process.env.DEBUG_LMSTUDIO_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #465692143e238f22 — Environment-variable access.
repo/packages/model-runtime/src/providers/lmstudio/index.test.ts:52 
      process.env.DEBUG_LMSTUDIO_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f59b787fc248f61 — Environment-variable access.
repo/packages/model-runtime/src/providers/lmstudio/index.test.ts:54 
      delete process.env.DEBUG_LMSTUDIO_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1cce068a626e9f66 — Environment-variable access.
repo/packages/model-runtime/src/providers/lmstudio/index.ts:15 
    chatCompletion: () => process.env.DEBUG_LMSTUDIO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be0d1193f5362afb — Environment-variable access.
repo/packages/model-runtime/src/providers/longcat/index.ts:30 
    chatCompletion: () => process.env.DEBUG_LONGCAT_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c35a8221dc65677e — Environment-variable access.
repo/packages/model-runtime/src/providers/minimax/index.ts:298 
    chatCompletion: () => process.env.DEBUG_MINIMAX_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c3a5908532383b2c — Environment-variable access.
repo/packages/model-runtime/src/providers/minimax/index.ts:319 
    chatCompletion: () => process.env.DEBUG_MINIMAX_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97c53d2821480de8 — Environment-variable access.
repo/packages/model-runtime/src/providers/minimaxCodingPlan/index.ts:28 
    chatCompletion: () => process.env.DEBUG_MINIMAX_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd66888513e9b8d3 — Environment-variable access.
repo/packages/model-runtime/src/providers/mistral/index.test.ts:39 
      delete process.env.DEBUG_MISTRAL_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #423550e109353ef8 — Environment-variable access.
repo/packages/model-runtime/src/providers/mistral/index.test.ts:45 
      process.env.DEBUG_MISTRAL_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a817bb1b34e03cbe — Environment-variable access.
repo/packages/model-runtime/src/providers/mistral/index.test.ts:48 
      delete process.env.DEBUG_MISTRAL_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a4f3c3b9f9b28bf — Environment-variable access.
repo/packages/model-runtime/src/providers/mistral/index.ts:59 
    chatCompletion: () => process.env.DEBUG_MISTRAL_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #80ac8a3d4c535bd7 — Environment-variable access.
repo/packages/model-runtime/src/providers/modelscope/index.test.ts:44 
      delete process.env.DEBUG_MODELSCOPE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eae71c01205a31b9 — Environment-variable access.
repo/packages/model-runtime/src/providers/modelscope/index.test.ts:50 
      process.env.DEBUG_MODELSCOPE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c91c3bfe135c9f6 — Environment-variable access.
repo/packages/model-runtime/src/providers/modelscope/index.test.ts:56 
      process.env.DEBUG_MODELSCOPE_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #890ea9289f942f77 — Environment-variable access.
repo/packages/model-runtime/src/providers/modelscope/index.ts:17 
    chatCompletion: () => process.env.DEBUG_MODELSCOPE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e934bb34627a5817 — Environment-variable access.
repo/packages/model-runtime/src/providers/moonshot/index.test.ts:140 
      delete process.env.DEBUG_MOONSHOT_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dbc539d344436aff — Environment-variable access.
repo/packages/model-runtime/src/providers/moonshot/index.test.ts:146 
      process.env.DEBUG_MOONSHOT_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98f2b1ef815b1b0d — Environment-variable access.
repo/packages/model-runtime/src/providers/moonshot/index.test.ts:149 
      delete process.env.DEBUG_MOONSHOT_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24b0d573f908c637 — Environment-variable access.
repo/packages/model-runtime/src/providers/moonshot/index.ts:258 
    chatCompletion: () => process.env.DEBUG_MOONSHOT_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56257f70caa1b8af — Environment-variable access.
repo/packages/model-runtime/src/providers/moonshot/index.ts:275 
    chatCompletion: () => process.env.DEBUG_MOONSHOT_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c89c21c70972e7e2 — Environment-variable access.
repo/packages/model-runtime/src/providers/nebius/index.test.ts:47 
      delete process.env.DEBUG_NEBIUS_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1bff16e7fc90a156 — Environment-variable access.
repo/packages/model-runtime/src/providers/nebius/index.test.ts:52 
      process.env.DEBUG_NEBIUS_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e51cacc856ce211e — Environment-variable access.
repo/packages/model-runtime/src/providers/nebius/index.test.ts:54 
      delete process.env.DEBUG_NEBIUS_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a067b96bf9cb08f2 — Environment-variable access.
repo/packages/model-runtime/src/providers/nebius/index.ts:25 
    chatCompletion: () => process.env.DEBUG_NEBIUS_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b8cdfedf96e84f85 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:38 
    delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0fc7bfbcf716707f — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:43 
    delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #74c7cad3f31861d7 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:48 
      delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f6914996dfb39dd — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:49 
      const debugResult = process.env.DEBUG_NEWAPI_CHAT_COMPLETION === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86e0fd5683dd91ea — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:54 
      process.env.DEBUG_NEWAPI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #67e8e9b28a0f33c8 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:55 
      const debugResult = process.env.DEBUG_NEWAPI_CHAT_COMPLETION === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ead3dcd536626067 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:683 
      delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8612df57b835a9c6 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:689 
      process.env.DEBUG_NEWAPI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #972ba8772fa28fdb — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:692 
      delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1758ae0eab44d739 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:696 
      process.env.DEBUG_NEWAPI_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f652b1243d5a309e — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:699 
      delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad4cbf3fc78d9f76 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.ts:76 
    chatCompletion: () => process.env.DEBUG_NEWAPI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe6df2cb1bdc433a — Environment-variable access.
repo/packages/model-runtime/src/providers/novita/index.ts:23 
    chatCompletion: () => process.env.DEBUG_NOVITA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30eda053d61653eb — Environment-variable access.
repo/packages/model-runtime/src/providers/nvidia/index.test.ts:235 
      process.env.DEBUG_NVIDIA_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b16cb523baa10769 — Environment-variable access.
repo/packages/model-runtime/src/providers/nvidia/index.test.ts:238 
      delete process.env.DEBUG_NVIDIA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eb65f318b69eb00e — Environment-variable access.
repo/packages/model-runtime/src/providers/nvidia/index.test.ts:242 
      delete process.env.DEBUG_NVIDIA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #563b10e9d00dc2f0 — Environment-variable access.
repo/packages/model-runtime/src/providers/nvidia/index.ts:82 
    chatCompletion: () => process.env.DEBUG_NVIDIA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1073998c487c285d — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.test.ts:303 
        const originalDebugValue = process.env.DEBUG_OLLAMA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #735b7dbf41b3e13c — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.test.ts:304 
        process.env.DEBUG_OLLAMA_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07048b3af0441910 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.test.ts:326 
        process.env.DEBUG_OLLAMA_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28993ed4fe5fafc4 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.test.ts:1041 
      delete process.env.DEBUG_OLLAMA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #41bab93419710ebf — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.test.ts:1047 
      process.env.DEBUG_OLLAMA_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d0b2f93e24f084a — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.test.ts:1050 
      delete process.env.DEBUG_OLLAMA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3ffa83767d31646f — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.ts:34 
    chatCompletion: () => process.env.DEBUG_OLLAMA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #baaf849add98d49e — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.ts:81 
      if (process.env.DEBUG_OLLAMA_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89a6ae1ce074ff63 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollamacloud/index.test.ts:52 
      delete process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26ec7012247720c8 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollamacloud/index.test.ts:58 
      process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28f7bd2df5a639c6 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollamacloud/index.test.ts:64 
      process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f58fcfb6762818d — Environment-variable access.
repo/packages/model-runtime/src/providers/ollamacloud/index.test.ts:70 
      process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #786e2b3bb56a55fc — Environment-variable access.
repo/packages/model-runtime/src/providers/ollamacloud/index.ts:20 
    chatCompletion: () => process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb653a000b766a8e — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:243 
        const originalDebugValue = process.env.DEBUG_OPENAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #45587976a85e27f5 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:246 
        process.env.DEBUG_OPENAI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c710146a9525006 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:262 
        process.env.DEBUG_OPENAI_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #032c45d1f65d1694 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:540 
      delete process.env.DEBUG_OPENAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e0a667b7e6ff684 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:546 
      const originalEnv = process.env.DEBUG_OPENAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c34cbf2b5ef900d — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:547 
      process.env.DEBUG_OPENAI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #349e172fa5d9365d — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:550 
      process.env.DEBUG_OPENAI_CHAT_COMPLETION = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #00f2fc4d0cd7cca8 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:554 
      delete process.env.DEBUG_OPENAI_RESPONSES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #df4a711a01ece367 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:560 
      const originalEnv = process.env.DEBUG_OPENAI_RESPONSES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f4c6100cce304489 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:561 
      process.env.DEBUG_OPENAI_RESPONSES = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05f45becedcd058b — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:564 
      process.env.DEBUG_OPENAI_RESPONSES = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a296783294822b37 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.ts:20 
const oaiSearchContextSize = process.env.OPENAI_SEARCH_CONTEXT_SIZE; // low, medium, high

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3bd87d7d31771916 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.ts:21 
const enableServiceTierFlex = process.env.OPENAI_SERVICE_TIER_FLEX === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b99744caca37348c — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.ts:67 
    chatCompletion: () => process.env.DEBUG_OPENAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #15a601235f6b0ba4 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.ts:68 
    responses: () => process.env.DEBUG_OPENAI_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #03561f71e699ae4e — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/opencodeCodingPlan/index.ts:99 
    const res = await fetch(MODELS_DEV_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #ff38e4802b014fd1 — Environment-variable access.
repo/packages/model-runtime/src/providers/opencodeCodingPlan/index.ts:395 
    chatCompletion: () => process.env.DEBUG_OPENCODE_GO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #df556965c878bf8e — Environment-variable access.
repo/packages/model-runtime/src/providers/opencodeCodingPlan/index.ts:408 
    chatCompletion: () => process.env.DEBUG_OPENCODE_GO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd70a437339fadea — Environment-variable access.
repo/packages/model-runtime/src/providers/opencodeZen/index.ts:26 
    chatCompletion: () => process.env.DEBUG_OPENCODE_ZEN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aae345e1fddc0f26 — Environment-variable access.
repo/packages/model-runtime/src/providers/openrouter/index.test.ts:80 
      delete process.env.DEBUG_OPENROUTER_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2436a2d857fa15db — Environment-variable access.
repo/packages/model-runtime/src/providers/openrouter/index.test.ts:86 
      process.env.DEBUG_OPENROUTER_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba3724f91112fd5b — Environment-variable access.
repo/packages/model-runtime/src/providers/openrouter/index.test.ts:89 
      delete process.env.DEBUG_OPENROUTER_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b81d22da3da45aeb — Environment-variable access.
repo/packages/model-runtime/src/providers/openrouter/index.ts:93 
    chatCompletion: () => process.env.DEBUG_OPENROUTER_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #701a2291ce05ba90 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/openrouter/index.ts:96 
    const response = await fetch('https://openrouter.ai/api/v1/models');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #c6af2d9daccac62d — Environment-variable access.
repo/packages/model-runtime/src/providers/perplexity/index.ts:42 
    chatCompletion: () => process.env.DEBUG_PERPLEXITY_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56a697f1768b9501 — Environment-variable access.
repo/packages/model-runtime/src/providers/ppio/index.ts:15 
    chatCompletion: () => process.env.DEBUG_PPIO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c55f7b47a65cae5 — Environment-variable access.
repo/packages/model-runtime/src/providers/qiniu/index.test.ts:37 
      delete process.env.DEBUG_QINIU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d65d35c0c54f8761 — Environment-variable access.
repo/packages/model-runtime/src/providers/qiniu/index.test.ts:43 
      process.env.DEBUG_QINIU_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b6134c850c083f32 — Environment-variable access.
repo/packages/model-runtime/src/providers/qiniu/index.test.ts:46 
      delete process.env.DEBUG_QINIU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #32776e99079748fa — Environment-variable access.
repo/packages/model-runtime/src/providers/qiniu/index.test.ts:50 
      process.env.DEBUG_QINIU_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2686e8dbeff61297 — Environment-variable access.
repo/packages/model-runtime/src/providers/qiniu/index.test.ts:53 
      delete process.env.DEBUG_QINIU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #714cbd4a8e90ac6a — Environment-variable access.
repo/packages/model-runtime/src/providers/qiniu/index.ts:11 
    chatCompletion: () => process.env.DEBUG_QINIU_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ac2ce1608fa798e — Environment-variable access.
repo/packages/model-runtime/src/providers/qwen/index.ts:114 
            search_strategy: process.env.QWEN_SEARCH_STRATEGY || 'standard', // standard or pro

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #350048ddbbb55212 — Environment-variable access.
repo/packages/model-runtime/src/providers/qwen/index.ts:126 
    chatCompletion: () => process.env.DEBUG_QWEN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #951c84bc2dfa2984 — Environment-variable access.
repo/packages/model-runtime/src/providers/replicate/index.ts:416 
      process.env.DEBUG_REPLICATE === '1' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #80ac3a20f6bfa620 — Environment-variable access.
repo/packages/model-runtime/src/providers/replicate/index.ts:417 
      process.env.DEBUG_REPLICATE_CHAT_COMPLETION === '1' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08d24a06b92e7aea — Environment-variable access.
repo/packages/model-runtime/src/providers/replicate/index.ts:418 
      process.env.NODE_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #996e8315bb83e24a — Environment-variable access.
repo/packages/model-runtime/src/providers/sambanova/index.ts:8 
    chatCompletion: () => process.env.DEBUG_SAMBANOVA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f7f346cca7d27df0 — Environment-variable access.
repo/packages/model-runtime/src/providers/search1api/index.test.ts:37 
      delete process.env.DEBUG_SEARCH1API_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76b6d7e69d8bb873 — Environment-variable access.
repo/packages/model-runtime/src/providers/search1api/index.test.ts:43 
      process.env.DEBUG_SEARCH1API_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #823069a9b3a62754 — Environment-variable access.
repo/packages/model-runtime/src/providers/search1api/index.test.ts:46 
      delete process.env.DEBUG_SEARCH1API_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d357ba6224bc3666 — Environment-variable access.
repo/packages/model-runtime/src/providers/search1api/index.ts:38 
    chatCompletion: () => process.env.DEBUG_SEARCH1API_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f7823b18ffc0f0a — Environment-variable access.
repo/packages/model-runtime/src/providers/sensenova/index.ts:50 
    chatCompletion: () => process.env.DEBUG_SENSENOVA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed7274f4449ab2ba — Environment-variable access.
repo/packages/model-runtime/src/providers/siliconcloud/index.ts:142 
    chatCompletion: () => process.env.DEBUG_SILICONCLOUD_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c9ca893bba23bf24 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:43 
      delete process.env.DEBUG_SPARK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c3ebf65c58f5edf0 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:49 
      process.env.DEBUG_SPARK_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8c81a6bafa96f084 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:52 
      delete process.env.DEBUG_SPARK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97a869b61bd34466 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:56 
      process.env.DEBUG_SPARK_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cca68d3690bce0c4 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:59 
      delete process.env.DEBUG_SPARK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5837cfe995425e7 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:111 
      delete process.env.SPARK_SEARCH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e9282391b3cb5f2 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:125 
      process.env.SPARK_SEARCH_MODE = 'deep';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dfc9b2d2b2357713 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:136 
      delete process.env.SPARK_SEARCH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea08441d5e697ae7 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.ts:46 
                search_mode: process.env.SPARK_SEARCH_MODE || 'normal', // normal or deep

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #60efefe3ee673f0f — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.ts:67 
    chatCompletion: () => process.env.DEBUG_SPARK_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c5424d512afe250 — Environment-variable access.
repo/packages/model-runtime/src/providers/stepfun/index.test.ts:47 
      delete process.env.DEBUG_STEPFUN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #742cb626484a5a55 — Environment-variable access.
repo/packages/model-runtime/src/providers/stepfun/index.test.ts:52 
      process.env.DEBUG_STEPFUN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8c2e43ee08356fde — Environment-variable access.
repo/packages/model-runtime/src/providers/stepfun/index.test.ts:54 
      delete process.env.DEBUG_STEPFUN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0b634055a07291a0 — Environment-variable access.
repo/packages/model-runtime/src/providers/stepfun/index.ts:38 
    chatCompletion: () => process.env.DEBUG_STEPFUN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c66e6c855396261 — Environment-variable access.
repo/packages/model-runtime/src/providers/straico/index.ts:40 
    chatCompletion: () => process.env.DEBUG_STRAICO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #9015dbc240ebf6d4 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/straico/index.ts:44 
    const response = await fetch(url, {
      headers: {
        Authorization: `Bearer ${client.apiKey}`,
      },
      method: 'GET',
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #413be5693bafa38b — Environment-variable access.
repo/packages/model-runtime/src/providers/streamlake/index.ts:19 
    chatCompletion: () => process.env.DEBUG_STREAMLAKE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4892683694878793 — Environment-variable access.
repo/packages/model-runtime/src/providers/superGrok/index.ts:31 
    chatCompletion: () => process.env.DEBUG_SUPERGROK_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc48727500264c2a — Environment-variable access.
repo/packages/model-runtime/src/providers/superGrok/index.ts:32 
    responses: () => process.env.DEBUG_SUPERGROK_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5e418f5a8d56280 — Environment-variable access.
repo/packages/model-runtime/src/providers/taichu/index.ts:21 
    chatCompletion: () => process.env.DEBUG_TAICHU_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b7d6fa3691c7ca6 — Environment-variable access.
repo/packages/model-runtime/src/providers/tencentcloud/index.test.ts:40 
      delete process.env.DEBUG_TENCENT_CLOUD_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b7c3f5f93bd0917 — Environment-variable access.
repo/packages/model-runtime/src/providers/tencentcloud/index.test.ts:44 
      process.env.DEBUG_TENCENT_CLOUD_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eab1f2471bdf3e04 — Environment-variable access.
repo/packages/model-runtime/src/providers/tencentcloud/index.test.ts:48 
      delete process.env.DEBUG_TENCENT_CLOUD_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #674201dfd7f28101 — Environment-variable access.
repo/packages/model-runtime/src/providers/tencentcloud/index.ts:14 
    chatCompletion: () => process.env.DEBUG_TENCENT_CLOUD_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6badf990003e6070 — Environment-variable access.
repo/packages/model-runtime/src/providers/togetherai/index.test.ts:47 
      delete process.env.DEBUG_TOGETHERAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9cc00d4f3454e614 — Environment-variable access.
repo/packages/model-runtime/src/providers/togetherai/index.test.ts:51 
      process.env.DEBUG_TOGETHERAI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #54bb3c5e9d88b435 — Environment-variable access.
repo/packages/model-runtime/src/providers/togetherai/index.test.ts:55 
      delete process.env.DEBUG_TOGETHERAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4aaafed51ccd4e3d — Environment-variable access.
repo/packages/model-runtime/src/providers/togetherai/index.ts:17 
    chatCompletion: () => process.env.DEBUG_TOGETHERAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2a859c4f79ed5eb7 — Environment-variable access.
repo/packages/model-runtime/src/providers/upstage/index.ts:8 
    chatCompletion: () => process.env.DEBUG_UPSTAGE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e493102fb669f9f3 — Environment-variable access.
repo/packages/model-runtime/src/providers/v0/index.test.ts:61 
      delete process.env.DEBUG_V0_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #788ee8453f22a2b2 — Environment-variable access.
repo/packages/model-runtime/src/providers/v0/index.test.ts:67 
      process.env.DEBUG_V0_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f7fde5a4a340e20d — Environment-variable access.
repo/packages/model-runtime/src/providers/v0/index.test.ts:73 
      process.env.DEBUG_V0_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0a81ebb2b7615b6 — Environment-variable access.
repo/packages/model-runtime/src/providers/v0/index.test.ts:79 
      process.env.DEBUG_V0_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3c9435d732b1aa9b — Environment-variable access.
repo/packages/model-runtime/src/providers/v0/index.ts:14 
    chatCompletion: () => process.env.DEBUG_V0_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #51f77fe12b05f4a2 — Environment-variable access.
repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:51 
      delete process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #446d511eb418f27a — Environment-variable access.
repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:57 
      process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0169f8d7a5ae2cba — Environment-variable access.
repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:60 
      delete process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7980c058fd0e31e2 — Environment-variable access.
repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:64 
      process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a78b784525010997 — Environment-variable access.
repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:67 
      delete process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0548962c73e847b6 — Environment-variable access.
repo/packages/model-runtime/src/providers/vercelaigateway/index.ts:87 
    chatCompletion: () => process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #041c930da3304a00 — Environment-variable access.
repo/packages/model-runtime/src/providers/vllm/index.ts:13 
    chatCompletion: () => process.env.DEBUG_VLLM_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f525dfd2b32cfdd — Environment-variable access.
repo/packages/model-runtime/src/providers/volcengine/index.ts:70 
    chatCompletion: () => process.env.DEBUG_VOLCENGINE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #baa53ffe376f1674 — Environment-variable access.
repo/packages/model-runtime/src/providers/volcengine/index.ts:71 
    responses: () => process.env.DEBUG_VOLCENGINE_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #95dfa21815f2d1f7 — Environment-variable access.
repo/packages/model-runtime/src/providers/volcengineCodingPlan/index.ts:28 
    chatCompletion: () => process.env.DEBUG_VOLCENGINE_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #23f12e8e6c14d008 — Environment-variable access.
repo/packages/model-runtime/src/providers/wenxin/index.test.ts:126 
      delete process.env.DEBUG_WENXIN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fbe2c73fd5f4cc10 — Environment-variable access.
repo/packages/model-runtime/src/providers/wenxin/index.test.ts:132 
      process.env.DEBUG_WENXIN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f24b7aafda24a52b — Environment-variable access.
repo/packages/model-runtime/src/providers/wenxin/index.test.ts:138 
      process.env.DEBUG_WENXIN_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a1aa484709349d5 — Environment-variable access.
repo/packages/model-runtime/src/providers/wenxin/index.ts:49 
    chatCompletion: () => process.env.DEBUG_WENXIN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac1d8e7b66672d02 — Environment-variable access.
repo/packages/model-runtime/src/providers/xai/index.ts:149 
    chatCompletion: () => process.env.DEBUG_XAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05422cb95df7afb1 — Environment-variable access.
repo/packages/model-runtime/src/providers/xai/index.ts:150 
    responses: () => process.env.DEBUG_XAI_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ccb16b41dc80f186 — Environment-variable access.
repo/packages/model-runtime/src/providers/xiaomimimo/index.test.ts:277 
      delete process.env.DEBUG_XIAOMIMIMO_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da762b852c89c1d9 — Environment-variable access.
repo/packages/model-runtime/src/providers/xiaomimimo/index.test.ts:283 
      process.env.DEBUG_XIAOMIMIMO_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b2777ef0f60323f9 — Environment-variable access.
repo/packages/model-runtime/src/providers/xiaomimimo/index.test.ts:286 
      delete process.env.DEBUG_XIAOMIMIMO_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #134ddfe5f5b179ae — Environment-variable access.
repo/packages/model-runtime/src/providers/xiaomimimo/index.ts:107 
    chatCompletion: () => process.env.DEBUG_XIAOMIMIMO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3fc5e9f1a18bbe9f — Environment-variable access.
repo/packages/model-runtime/src/providers/xinference/index.ts:18 
    chatCompletion: () => process.env.DEBUG_XINFERENCE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db8523da5fae2e24 — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.test.ts:31 
    delete process.env.DEBUG_ZENMUX_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d522775186f8d94e — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.test.ts:36 
    delete process.env.DEBUG_ZENMUX_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1e849aafa21bee6a — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.test.ts:41 
      delete process.env.DEBUG_ZENMUX_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc4155d53ab38fc2 — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.test.ts:42 
      const debugResult = process.env.DEBUG_ZENMUX_CHAT_COMPLETION === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2cc4bcca9bed0344 — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.test.ts:47 
      process.env.DEBUG_ZENMUX_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb71d3a4b8c26317 — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.test.ts:48 
      const debugResult = process.env.DEBUG_ZENMUX_CHAT_COMPLETION === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d42adbe500cbbc9c — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.ts:39 
    chatCompletion: () => process.env.DEBUG_ZENMUX_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae530be7612c09cc — Environment-variable access.
repo/packages/model-runtime/src/providers/zeroone/index.test.ts:55 
      delete process.env.DEBUG_ZEROONE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a4504cbe585ad391 — Environment-variable access.
repo/packages/model-runtime/src/providers/zeroone/index.test.ts:61 
      process.env.DEBUG_ZEROONE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d51718679b6b9fa9 — Environment-variable access.
repo/packages/model-runtime/src/providers/zeroone/index.test.ts:67 
      process.env.DEBUG_ZEROONE_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48cfc3464218d059 — Environment-variable access.
repo/packages/model-runtime/src/providers/zeroone/index.test.ts:73 
      process.env.DEBUG_ZEROONE_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #848276576ae1d7ad — Environment-variable access.
repo/packages/model-runtime/src/providers/zeroone/index.ts:14 
    chatCompletion: () => process.env.DEBUG_ZEROONE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52ff156cd33c1b28 — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.test.ts:44 
      delete process.env.DEBUG_ZHIPU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #704688d16fee93bd — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.test.ts:50 
      process.env.DEBUG_ZHIPU_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad3afafe22d3ff29 — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.test.ts:53 
      delete process.env.DEBUG_ZHIPU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d4c97cda02fdb698 — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.test.ts:112 
        process.env.ZHIPU_SEARCH_ENGINE = 'search_pro';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d1e0c7aa2bd4858 — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.test.ts:129 
        delete process.env.ZHIPU_SEARCH_ENGINE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4dd2430ce727d7ea — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.ts:85 
                search_engine: process.env.ZHIPU_SEARCH_ENGINE || 'search_std', // search_std, search_pro

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #55dfa7611582f270 — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.ts:215 
    chatCompletion: () => process.env.DEBUG_ZHIPU_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #855e2a3db74de3af — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/zhipu/index.ts:220 
    const response = await fetch(url, {
      headers: {
        'Authorization': `Bearer ${client.apiKey}`,
        'Bigmodel-Organization': 'lobehub',
        'Bigmodel-Project': 'lobechat',
      },
      method: 'GET',
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #0508d304b9f9d3c7 — Filesystem access.
repo/packages/model-runtime/src/utils/modelConfigImport.test.ts:13 
        readFile(path.resolve(utilsDir, file), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm)

npm first-party
high pii_flow production #2b72e1f49e408352 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/docsWorkflow/utils.ts:96 · flow /tmp/closeopen-9mgsdxzw/repo/scripts/docsWorkflow/utils.ts:87 → /tmp/closeopen-9mgsdxzw/repo/scripts/docsWorkflow/utils.ts:96 
    const response = await fetch(url, { headers });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #6153bd5c3811d377 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/serverLauncher/startServer.js:141 · flow /tmp/closeopen-9mgsdxzw/repo/scripts/serverLauncher/startServer.js:131 → /tmp/closeopen-9mgsdxzw/repo/scripts/serverLauncher/startServer.js:141 
      const res = await fetch(url, {
        method: 'POST',
        headers: {
          'Authorization': `Bearer ${KEY_VAULTS_SECRET}`,
          'Content-Type': 'application/json',
        },
        body: JSON.stringify({}),
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #c6e70a689e0a94d5 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/serverLauncher/startServer.js:185 · flow /tmp/closeopen-9mgsdxzw/repo/scripts/serverLauncher/startServer.js:168 → /tmp/closeopen-9mgsdxzw/repo/scripts/serverLauncher/startServer.js:185 
    const res = await fetch(url, {
      method: 'POST',
      headers: {
        'Authorization': `Bearer ${QSTASH_TOKEN}`,
        'Content-Type': 'application/json',
        'Upstash-Method': 'POST',
        'Upstash-Cron': '*/10 * * * *',
        'Upstash-Schedule-Id': 'lobe-task-schedule-dispatch',
      },
      body: JSON.stringify({}),
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #d3edd20b30a54e26 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/src/app/(backend)/market/oidc/[[...segments]]/route.ts:185 · flow /tmp/closeopen-9mgsdxzw/repo/src/app/(backend)/market/oidc/[[...segments]]/route.ts:7 → /tmp/closeopen-9mgsdxzw/repo/src/app/(backend)/market/oidc/[[...segments]]/route.ts:185 
          const response = await fetch(userInfoUrl, {
            headers: {
              'Content-Type': 'application/json',
              'x-lobe-trust-token': trustedClientToken,
            },
            method: 'GET',
          });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #9b15cf37e4991bd9 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/src/layout/AuthProvider/MarketAuth/oidc.ts:150 · flow /tmp/closeopen-9mgsdxzw/repo/src/layout/AuthProvider/MarketAuth/oidc.ts:142 → /tmp/closeopen-9mgsdxzw/repo/src/layout/AuthProvider/MarketAuth/oidc.ts:150 
    const response = await fetch(tokenUrl, {
      body: body.toString(),
      headers: {
        'Content-Type': 'application/x-www-form-urlencoded',
      },
      method: 'POST',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
medium telemetry production #30b30751816ca9b8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/components/Analytics/HomePageTracker.tsx:15 
      analytics.track({
        name: 'main_page_view',
        properties: {
          spm: 'homepage.main_page.view',
        },
      });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #6208c4efbd81bf20 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/features/AgentSetting/store/action.ts:316 
        analytics.track({
          name: 'agent_meta_updated',
          properties: {
            assistant_avatar: mergedMeta.avatar,
            assistant_background_color: mergedMeta.backgroundColor,
            assistant_description: mergedMeta.description,
            assistant_name: mergedMeta.title,
            assistant_tags: mergedMeta.tags,
            is_inbox: id === 'inbox',
            session_id: id || 'unknown',
            timestamp: Date.now(),
            user_id: useUserStore.getState().user?.id || 'anonymous',
          },
        });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #f16d91295f2f9d9f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/features/Billboard/Carousel.tsx:146 
      analytics?.track({
        name: 'billboard_cta_clicked',
        properties: {
          billboard_slug: billboardSlug,
          item_id: item.id,
          link_url: item.linkUrl,
          position,
          spm: 'billboard.cta.clicked',
        },
      });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #ad4c477e321c55cf — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/features/Billboard/Carousel.tsx:245 
      void analytics.track({
        name: 'billboard_served',
        properties: {
          billboard_slug: set.slug,
          item_count: set.items.length,
          spm: 'billboard.card.served',
        },
      });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #2ec66c567bfd1f71 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/features/Billboard/index.tsx:48 
      analytics?.track({
        name: 'billboard_dismissed',
        properties: {
          billboard_slug: billboard.slug,
          item_count: billboard.items.length,
          spm: 'billboard.dismiss.clicked',
        },
      });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #a9242ce00f79dfa9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/features/User/UserLoginOrSignup/trackLoginOrSignupClicked.ts:23 
    await analytics.track({
      name: 'login_or_signup_clicked',
      properties: {
        ...(lhCid && { lh_cid: lhCid }),
        ...(provider && { provider }),
        spm,
      },
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #0159bb39002430ba — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/libs/analytics/productUsageEvent.ts:27 
    await analytics.track(event);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #3945ca9ec8381339 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/routes/(main)/home/_layout/Footer/index.tsx:177 
        analytics?.track({ name: eventName, properties });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #8649adaf74a8ec24 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/routes/(main)/home/_layout/Footer/index.tsx:188 
        analytics?.track({
          name: 'home_footer_menu_clicked',
          properties: { key, spm: `homepage.footer.${key}.clicked` },
        });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #78357e3071da166d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/routes/(main)/home/_layout/Footer/index.tsx:451 
        analytics?.track({
          name: 'home_footer_menu_opened',
          properties: { keys: trackedMenuKeys.join(','), spm: 'homepage.footer.opened' },
        });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #203822dc22c1fbb3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/routes/(mobile)/(home)/features/SessionListContent/List/index.tsx:65 
                analytics?.track({
                  name: 'switch_session',
                  properties: {
                    assistant_name: session.meta?.title || 'Untitled Agent',
                    assistant_tags: session.meta?.tags || [],
                    group_id: sessionGroupId,
                    group_name: groupName,
                    session_id: id,
                    spm: 'homepage.chat.session_list_item.click',
                    user_id: userId || 'anonymous',
                  },
                });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #1e7207a2a701d2df — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/services/onboardingFeedback/index.ts:62 
    options.analytics?.track({
      name: FEEDBACK_EVENT_NAME,
      properties: {
        rating: payload.rating,
        spm: FEEDBACK_SPM,
      },
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #28378a4531bee842 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/services/onboardingMetrics/index.ts:34 
    client.track({ name, properties });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #0bd71ae09033a212 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/store/agent/slices/agent/action.ts:152 
      analytics.track({
        name: 'new_agent_created',
        properties: {
          agent_id: result.agentId,
          assistant_name: params.config?.title || 'Untitled Agent',
          assistant_tags: params.config?.tags || [],
          user_id: userId || 'anonymous',
        },
      });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #4aa53ac9abdc07fc — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/store/session/slices/session/action.ts:80 
      analytics.track({
        name: 'new_agent_created',
        properties: {
          assistant_name: newSession.meta?.title || 'Untitled Agent',
          assistant_tags: newSession.meta?.tags || [],
          session_id: id,
          user_id: userId || 'anonymous',
        },
      });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 622 low-confidence finding(s)
low env_fs production #5b5e98119dd0f568 — Filesystem access.
repo/.agents/scripts/check/autofix.ts:39 
        return [file, await readFile(path.join(rootDir(), file), 'utf8')];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #355d9978af3364b1 — Filesystem access.
repo/.agents/scripts/check/autofix.ts:62 
      current = await readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f7e5617f2ef0227e — Filesystem access.
repo/.agents/scripts/check/autofix.ts:69 
    await writeFile(origCopy, original);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #02141ddc1f51aa11 — Filesystem access.
repo/.agents/scripts/check/autofix.ts:85 
  await writeFile(diffFile, diffs.map((entry) => entry.diff).join('\n\n') + '\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b9219cfecd77779f — Filesystem access.
repo/.agents/scripts/check/check.test.ts:84 
    const pkg = JSON.parse(await readFile(path.join(repoRoot, 'package.json'), 'utf8')) as {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f1f34f7ff61ecb5 — Filesystem access.
repo/.agents/scripts/check/delegate.ts:29 
    content = await readFile(gitPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b824208c5d9ef6b — Filesystem access.
repo/.agents/scripts/check/delegate.ts:41 
    const pkg = JSON.parse(await readFile(path.join(hostRoot, 'package.json'), 'utf8')) as {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3134bb838551b03c — Filesystem access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm-analyze.mjs:99 
  const raw = await readFile(tracePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a3234afb0a951d0 — Filesystem access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm-analyze.mjs:204 
  const raw = await readFile(resultPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fedebc853cec598b — Filesystem access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm-analyze.mjs:209 
    await writeFile(resultPath, `${JSON.stringify(result, null, 2)}\n`, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9bf34966b6d2f65 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:99 
    checkItemId: process.env.AGENT_BROWSER_KLM_CHECK || process.env.KLM_CHECK_ITEM_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9e904d781e57b6d — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:100 
    label: process.env.AGENT_BROWSER_KLM_LABEL || process.env.KLM_LABEL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #06425b0f29232ec2 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:101 
    phaseId: process.env.AGENT_BROWSER_KLM_PHASE || process.env.KLM_PHASE_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf5d844b9ba033eb — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:102 
    surface: process.env.AGENT_BROWSER_KLM_SURFACE || process.env.KLM_SURFACE || 'web',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #38c87663a71be58e — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:103 
    commandTimeoutMs: parseNumber(process.env.AGENT_BROWSER_KLM_COMMAND_TIMEOUT_MS, undefined),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fda7ba3ba690ddc6 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:105 
      process.env.AGENT_BROWSER_KLM_TRACE ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb024b9712c149c2 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:106 
      process.env.INTERACTION_TRACE ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61ab83e8a149e97b — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:109 
  let binary = process.env.AGENT_BROWSER_BIN || 'agent-browser';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5eb039076077b624 — Filesystem access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:325 
    const text = readFileSync(file, 'utf8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #209fe369ae5bcf5d — Filesystem access.
repo/.agents/skills/agent-testing/scripts/agent-gateway/analyze-events.ts:32 
const raw = readFileSync(file, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b603a7aae03cf12b — Filesystem access.
repo/.agents/skills/agent-testing/scripts/agent-gateway/analyze.mjs:29 
const raw = JSON.parse(fs.readFileSync(file, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6922e923e549bcc6 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-gateway/local-gateway-probe.mjs:26 
const WS_BASE = process.env.GATEWAY_WS || 'ws://localhost:8787';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e0234804de4668a — Filesystem access.
repo/.agents/skills/agent-testing/scripts/agent-gateway/local-gateway-probe.mjs:30 
  const m = readFileSync(p, 'utf8').match(/^JWKS_KEY=(.*)$/m);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da86b2a00a45dfa6 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-gateway/local-gateway-probe.mjs:34 
  process.env.JWKS_KEY?.trim() ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b82744845868a550 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-gateway/local-gateway-probe.mjs:35 
  fromFile(process.env.JWKS_SOURCE) ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d81f5f2294933853 — Filesystem access.
repo/.agents/skills/agent-testing/scripts/agent-gateway/run.ts:153 
  writeFileSync(dumpPath, json, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #57ca856d30db0ec1 — Filesystem access.
repo/.agents/skills/agent-testing/scripts/cdp-capture.cjs:106 
  fs.writeFileSync(OUT, buf);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4be50cc71e33a360 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/check-s3.mjs:11 
const endpoint = process.env.S3_ENDPOINT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97c73baa2b134243 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/check-s3.mjs:12 
const bucket = process.env.S3_BUCKET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c3ecc344194c9d7a — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/check-s3.mjs:21 
    accessKeyId: process.env.S3_ACCESS_KEY_ID || 'S3RVER',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad504a163a265f15 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/check-s3.mjs:22 
    secretAccessKey: process.env.S3_SECRET_ACCESS_KEY || 'S3RVER',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aae67338214ac441 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/check-s3.mjs:25 
  forcePathStyle: process.env.S3_ENABLE_PATH_STYLE !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43983ba109c3e364 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/check-s3.mjs:26 
  region: process.env.S3_REGION || 'us-east-1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb25a19f1940b634 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/start-s3.mjs:8 
const port = Number(process.env.S3_DEV_PORT || 29_000);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #614fcb2f73ddf650 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/start-s3.mjs:9 
const address = process.env.S3_DEV_ADDRESS || '127.0.0.1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2d00cb447135d49 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/start-s3.mjs:10 
const bucket = process.env.S3_BUCKET || 'agent-testing-bucket';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c5e73c2ecca0a03 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/start-s3.mjs:11 
const directory = path.resolve(process.env.S3_DATA_DIR || '.records/data/agent-testing-s3');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9512a527746886a5 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/start-s3.mjs:14 
for (const candidate of [process.env.APP_URL, process.env.S3_ALLOWED_ORIGIN]) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5695a06628b2477a — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/start-s3.mjs:23 
for (const candidatePort of [process.env.PORT, process.env.SPA_PORT, process.env.VITE_DEV_PORT]) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8254c809744f3259 — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/apply-cutoffs.ts:17 
const map: Record<string, string> = JSON.parse(readFileSync(mapPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e17862e5230f556a — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/apply-cutoffs.ts:28 
  const lines = readFileSync(path, 'utf8').split('\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #68a540e991488cee — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/apply-cutoffs.ts:65 
    writeFileSync(path, out.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4bd6751b756b6485 — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/apply-family.ts:5 
  readFileSync('/tmp/family-map.json', 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca343aa14e861339 — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/apply-family.ts:14 
  const lines = readFileSync(path, 'utf8').split('\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62b4b4eeee64e53b — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/apply-family.ts:45 
    writeFileSync(path, out.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ada4c0094c29e2a0 — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/derive-family.ts:11 
const ids: string[] = JSON.parse(readFileSync('/tmp/model-ids.json', 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bec0e7bc25ea33ac — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/derive-family.ts:235 
  writeFileSync('/tmp/family-map.json', JSON.stringify(map, null, 1));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #797247870ba4e9d1 — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/extract-model-ids.ts:22 
writeFileSync(out, JSON.stringify([...ids].sort(), null, 1));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0aa5defb26744393 — Environment-variable access.
repo/.github/scripts/auto-close-duplicates.ts:94 
  const token = process.env.GITHUB_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #415f6847a68cf7eb — Environment-variable access.
repo/.github/scripts/auto-close-duplicates.ts:100 
  const owner = process.env.GITHUB_REPOSITORY_OWNER || 'lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #27594c2b7c4a8ed3 — Environment-variable access.
repo/.github/scripts/auto-close-duplicates.ts:101 
  const repo = process.env.GITHUB_REPOSITORY_NAME || 'lobe-chat';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7a87dbe3cab9c699 — Environment-variable access.
repo/.github/scripts/auto-handle-mcp-submission.ts:157 
  const token = process.env.GITHUB_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5de84ca3edde6ca2 — Environment-variable access.
repo/.github/scripts/auto-handle-mcp-submission.ts:160 
  const owner = process.env.GITHUB_REPOSITORY_OWNER || 'lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #36dbf231a7b3f976 — Environment-variable access.
repo/.github/scripts/auto-handle-mcp-submission.ts:161 
  const repo = process.env.GITHUB_REPOSITORY_NAME || 'lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c37a2143fff63bda — Environment-variable access.
repo/.github/scripts/auto-handle-mcp-submission.ts:162 
  const issueNumber = Number(process.env.ISSUE_NUMBER);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5b60d2abe3b7ac11 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:13 
    validateEnv: process.env.ERROR_VALIDATE_ENV || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e04a46113eb65318 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:14 
    rebaseAttempt: process.env.ERROR_REBASE_ATTEMPT || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c037805a00d55532 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:15 
    createBranch: process.env.ERROR_CREATE_BRANCH || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b99cc28868e69139 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:16 
    installDeps: process.env.ERROR_INSTALL_DEPS || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #673a68dbeea8af9b — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:17 
    runI18n: process.env.ERROR_RUN_I18N || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #24aa6bf52ae3b423 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:18 
    commitPush: process.env.ERROR_COMMIT_PUSH || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #38e32b0a6425c5fd — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:23 
    validateEnv: process.env.STEP_VALIDATE_ENV || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8ace78c18b007d90 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:24 
    checkBranch: process.env.STEP_CHECK_BRANCH || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #82fadaa25071914b — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:25 
    rebaseAttempt: process.env.STEP_REBASE_ATTEMPT || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #eb2497ad3258668c — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:26 
    createBranch: process.env.STEP_CREATE_BRANCH || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #925d5a27d24e0843 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:27 
    installDeps: process.env.STEP_INSTALL_DEPS || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7c3db8030779c835 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:28 
    runI18n: process.env.STEP_RUN_I18N || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3445cceea43db5ff — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:29 
    commitPush: process.env.STEP_COMMIT_PUSH || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a2678b5432aac361 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:30 
    createPr: process.env.STEP_CREATE_PR || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5c324c5eeba319bc — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:77 
- **Runner OS:** ${process.env.RUNNER_OS || 'Unknown'}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3fb49602fbcaaee2 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:78 
- **Bun Version:** ${process.env.BUN_VERSION || 'Default'}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #68b4de2d8d6b0545 — Environment-variable access.
repo/.github/scripts/should-run-dedupe.ts:63 
  const outputPath = process.env.GITHUB_OUTPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2a6f3341f13a8f63 — Environment-variable access.
repo/.github/scripts/should-run-dedupe.ts:105 
  const token = process.env.GITHUB_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0e0d8971bf722eb1 — Environment-variable access.
repo/.github/scripts/should-run-dedupe.ts:108 
  const repository = process.env.GITHUB_REPOSITORY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ef55c4d7fb1cd00d — Environment-variable access.
repo/.github/scripts/should-run-dedupe.ts:110 
  const owner = process.env.GITHUB_REPOSITORY_OWNER || repositoryOwner || 'lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #28fd788667e79401 — Environment-variable access.
repo/.github/scripts/should-run-dedupe.ts:111 
  const repo = process.env.GITHUB_REPOSITORY_NAME || repositoryName || 'lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e841d9bd4753d2b0 — Environment-variable access.
repo/.github/scripts/should-run-dedupe.ts:112 
  const issueNumber = Number(process.env.ISSUE_NUMBER);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83f585bdc22b9c2a — Filesystem access.
repo/.i18nrc.js:37 
      fs.readFileSync(path.join(__dirname, 'docs/glossary.mdx'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1dd4bfd8939efd20 — Environment-variable access.
repo/apps/cli/e2e/agent-fs-vfs.e2e.test.ts:16 
const AGENT_ID = process.env.AGENT_FS_E2E_AGENT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3faadd41c621e01 — Environment-variable access.
repo/apps/cli/e2e/agent-fs-vfs.e2e.test.ts:17 
const CLI = process.env.LH_CLI_PATH || 'LOBEHUB_CLI_HOME=.lobehub-dev bun src/index.ts';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #997773f17238e319 — Environment-variable access.
repo/apps/cli/e2e/agent-fs-vfs.e2e.test.ts:23 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f6c55a5d76fd05d0 — Environment-variable access.
repo/apps/cli/e2e/agent-signal.e2e.test.ts:26 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #600cd9f7e8965d7e — Environment-variable access.
repo/apps/cli/e2e/agent-signal.e2e.test.ts:27 
const AGENT_ID = process.env.AGENT_SIGNAL_AGENT_ID || process.env.AGENT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d0b97ae92b4226a — Filesystem access.
repo/apps/cli/e2e/agent-signal.e2e.test.ts:33 
const golden = JSON.parse(readFileSync(goldenPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92412fda20cbd8fc — Environment-variable access.
repo/apps/cli/e2e/agent-signal.e2e.test.ts:38 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be50daf8c9eb7de3 — Environment-variable access.
repo/apps/cli/e2e/agent.e2e.test.ts:18 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f521e05ff9cb2132 — Environment-variable access.
repo/apps/cli/e2e/agent.e2e.test.ts:24 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f8f45aa3ce18ee53 — Environment-variable access.
repo/apps/cli/e2e/doc.e2e.test.ts:19 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a3eaf02c6603c8b — Environment-variable access.
repo/apps/cli/e2e/doc.e2e.test.ts:25 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2641d9339cce0968 — Filesystem access.
repo/apps/cli/e2e/doc.e2e.test.ts:146 
      fs.writeFileSync(tmpFile, '# File Content\nFrom body-file flag');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f485ad1e3cf89a94 — Filesystem access.
repo/apps/cli/e2e/doc.e2e.test.ts:197 
      fs.writeFileSync(tmpFile, '# Created from file\nTest content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee1c92136753e909 — Filesystem access.
repo/apps/cli/e2e/doc.e2e.test.ts:229 
      fs.writeFileSync(tmpFile, JSON.stringify(docs));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2de07b9074f1de3c — Environment-variable access.
repo/apps/cli/e2e/file.e2e.test.ts:17 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #477938c723c974eb — Environment-variable access.
repo/apps/cli/e2e/file.e2e.test.ts:23 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5af072f51e258076 — Filesystem access.
repo/apps/cli/e2e/file.e2e.test.ts:88 
      fs.writeFileSync(tmpFile, 'hello from lh e2e upload');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a4f0d59a167e064 — Filesystem access.
repo/apps/cli/e2e/file.e2e.test.ts:101 
      fs.writeFileSync(tmpFile, 'hello from lh e2e --file upload');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8063fb4ac3e1eff1 — Environment-variable access.
repo/apps/cli/e2e/generate.e2e.test.ts:14 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f6074326e61e4af — Environment-variable access.
repo/apps/cli/e2e/generate.e2e.test.ts:20 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #18d334f4531e2b84 — Environment-variable access.
repo/apps/cli/e2e/kb.e2e.test.ts:19 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0f313acf8bbb509 — Environment-variable access.
repo/apps/cli/e2e/kb.e2e.test.ts:25 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4bbf5cae7514f2a1 — Filesystem access.
repo/apps/cli/e2e/kb.e2e.test.ts:221 
      fs.writeFileSync(tmpFile, 'E2E upload test content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ab8158110053b76 — Environment-variable access.
repo/apps/cli/e2e/memory.e2e.test.ts:16 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a47402bac1519956 — Environment-variable access.
repo/apps/cli/e2e/memory.e2e.test.ts:22 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #403f49d50d7cc740 — Environment-variable access.
repo/apps/cli/e2e/message.e2e.test.ts:14 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd7740556d5606cf — Environment-variable access.
repo/apps/cli/e2e/message.e2e.test.ts:20 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08cf5fdf4011094d — Environment-variable access.
repo/apps/cli/e2e/model.e2e.test.ts:17 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d6b0c6ad4f67762 — Environment-variable access.
repo/apps/cli/e2e/model.e2e.test.ts:24 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a8f3d86825b173c — Environment-variable access.
repo/apps/cli/e2e/plugin.e2e.test.ts:14 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #523d85e8e3300df6 — Environment-variable access.
repo/apps/cli/e2e/plugin.e2e.test.ts:20 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d616ae1dae54e85e — Environment-variable access.
repo/apps/cli/e2e/provider.e2e.test.ts:16 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97cc11d6bd4ce9c7 — Environment-variable access.
repo/apps/cli/e2e/provider.e2e.test.ts:22 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0507cdf0d512f587 — Environment-variable access.
repo/apps/cli/e2e/search.e2e.test.ts:14 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b77c4a5eb7fd4b8e — Environment-variable access.
repo/apps/cli/e2e/search.e2e.test.ts:20 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #345e6969b6d6f5af — Environment-variable access.
repo/apps/cli/e2e/skill.e2e.test.ts:16 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2ea3245688d318c — Environment-variable access.
repo/apps/cli/e2e/skill.e2e.test.ts:22 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe0f3989c2f612a7 — Environment-variable access.
repo/apps/cli/e2e/topic.e2e.test.ts:16 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0ab565045cec436 — Environment-variable access.
repo/apps/cli/e2e/topic.e2e.test.ts:22 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c22fa9b83b34f385 — Environment-variable access.
repo/apps/cli/src/api/client.ts:22 
  const envJwt = process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4283f9d37f8b1966 — Environment-variable access.
repo/apps/cli/src/api/client.ts:32 
  const envApiKey = process.env[CLI_API_KEY_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db6ad9a35a0afbd3 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:19 
  const originalJwt = process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e98eb92103965eda — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:20 
  const originalWorkspaceId = process.env.LOBEHUB_WORKSPACE_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb35f111f5a4f7d0 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:24 
    delete process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24bb4dcc293e1558 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:25 
    delete process.env.LOBEHUB_WORKSPACE_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87364d8c73674787 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:29 
    if (originalJwt === undefined) delete process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ed6440c3d839a5d — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:30 
    else process.env.LOBEHUB_JWT = originalJwt;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48383994a36e665f — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:32 
    if (originalWorkspaceId === undefined) delete process.env.LOBEHUB_WORKSPACE_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f9d9842d80607e45 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:33 
    else process.env.LOBEHUB_WORKSPACE_ID = originalWorkspaceId;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7452d6ad8935d4d9 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:37 
    process.env.LOBEHUB_JWT = 'env-jwt';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5279449624a1422 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:38 
    process.env.LOBEHUB_WORKSPACE_ID = 'workspace-1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae5f892d5e65b66f — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:56 
    process.env.LOBEHUB_WORKSPACE_ID = 'workspace-1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ec37cbaa1cc5a90 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:71 
    process.env.LOBEHUB_JWT = 'env-jwt';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c936c9460c61d4f3 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:72 
    process.env.LOBEHUB_WORKSPACE_ID = 'workspace-1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ffc26fae6c10573d — Environment-variable access.
repo/apps/cli/src/api/http.ts:16 
  const envJwt = process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #151b40b87a1a016e — Environment-variable access.
repo/apps/cli/src/api/http.ts:33 
    if (process.env[CLI_API_KEY_ENV]) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c6b0d4087fb7ff85 — Environment-variable access.
repo/apps/cli/src/api/http.ts:80 
  const envJwt = process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c8b6d0347d7d105 — Environment-variable access.
repo/apps/cli/src/api/http.ts:90 
  const envApiKey = process.env[CLI_API_KEY_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af1523b451aa92ab — Environment-variable access.
repo/apps/cli/src/api/workspace.ts:10 
  const fromEnv = process.env.LOBEHUB_WORKSPACE_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #01476cf5cc10a7f9 — Filesystem access.
repo/apps/cli/src/auth/credentials.test.ts:63 
      const raw = fs.readFileSync(credentialsFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9aabd213135a00f0 — Filesystem access.
repo/apps/cli/src/auth/credentials.test.ts:93 
      fs.writeFileSync(credentialsFile, JSON.stringify(testCredentials));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #77836c7a0015587b — Filesystem access.
repo/apps/cli/src/auth/credentials.test.ts:100 
      const raw = fs.readFileSync(credentialsFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #39e502873f8a25be — Filesystem access.
repo/apps/cli/src/auth/credentials.test.ts:106 
      fs.writeFileSync(credentialsFile, 'not-valid-base64-or-json!!!');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da1bfda43bebdcf6 — Environment-variable access.
repo/apps/cli/src/auth/credentials.ts:12 
const LOBEHUB_DIR_NAME = process.env.LOBEHUB_CLI_HOME || '.lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #caf3ad0fefac6c8b — Filesystem access.
repo/apps/cli/src/auth/credentials.ts:48 
  fs.writeFileSync(CREDENTIALS_FILE, encrypted, { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc4f04fb691f206d — Filesystem access.
repo/apps/cli/src/auth/credentials.ts:53 
    const data = fs.readFileSync(CREDENTIALS_FILE, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f61c5a5da4ca116 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:16 
    (process.env.LOBEHUB_SERVER || 'https://app.lobehub.com').replace(/\/$/, ''),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5dbb7800837f0579 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:37 
  const originalApiKey = process.env.LOBEHUB_CLI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7dbb21adbe6628d2 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:38 
  const originalJwt = process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6776225789cc1496 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:39 
  const originalServer = process.env.LOBEHUB_SERVER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2e96211b7491e9a3 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:45 
    delete process.env.LOBEHUB_CLI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f47ec6bca9abfb4 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:46 
    delete process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #788d35a7fcba77c3 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:47 
    delete process.env.LOBEHUB_SERVER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c53336c0fcdf15e2 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:51 
    process.env.LOBEHUB_CLI_API_KEY = originalApiKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc7c8c6122034e53 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:52 
    process.env.LOBEHUB_JWT = originalJwt;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89cbce0e15ffae61 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:53 
    process.env.LOBEHUB_SERVER = originalServer;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48eda5a41fb8a6bc — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:109 
      process.env.LOBEHUB_CLI_API_KEY = 'sk-lh-test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9541da7a26896f48 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:124 
      process.env.LOBEHUB_CLI_API_KEY = 'sk-lh-test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13d6bf5102ea779e — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:125 
      process.env.LOBEHUB_SERVER = 'https://self-hosted.example.com/';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f302d1c94591a8d — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.ts:38 
  const envJwt = process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a890bba8dfbdd17 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.ts:73 
  const envApiKey = process.env[CLI_API_KEY_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4447ce2e85597553 — Filesystem access.
repo/apps/cli/src/commands/agent.test.ts:162 
    await writeFile(graphFile, JSON.stringify(graph), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e9d886ad7d26d06 — Filesystem access.
repo/apps/cli/src/commands/agent.ts:22 
  const content = await readFile(graphFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #116164c0aed56593 — Filesystem access.
repo/apps/cli/src/commands/agent/spaceFs.ts:275 
    return readFileSync(options.contentFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0f72cefb204761b — Filesystem access.
repo/apps/cli/src/commands/botMessage.test.ts:99 
    await writeFile(filePath, 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2d195163c5bba22 — Filesystem access.
repo/apps/cli/src/commands/botMessage.ts:87 
  const bytes = await readFile(raw);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #502bcd6edabfe102 — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:8 
  const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88f0a43c42a19176 — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:16 
    delete process.env.LOBEHUB_COMP_CWORD;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0c6776c19f9ba10 — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:17 
    process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75c5b16b5b912b2d — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:39 
    process.env.SHELL = '/bin/zsh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b244ccbf2044bd59 — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:58 
    process.env.LOBEHUB_COMP_CWORD = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2803fa17faa360b2 — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:67 
    process.env.LOBEHUB_COMP_CWORD = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b63945d888a39aaa — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:76 
    process.env.LOBEHUB_COMP_CWORD = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48894495d848976f — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:85 
    process.env.LOBEHUB_COMP_CWORD = '2';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98e88d4eded88142 — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:94 
    process.env.LOBEHUB_COMP_CWORD = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91560df83a76c8da — Environment-variable access.
repo/apps/cli/src/commands/completion.ts:23 
      const currentWordIndex = parseCompletionWordIndex(process.env.LOBEHUB_COMP_CWORD, words);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d833d4955d9faeb — Environment-variable access.
repo/apps/cli/src/commands/connect.ts:106 
      const isServiceChild = options.serviceChild || process.env.LOBEHUB_CONNECT_SERVICE === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #22793124afc748db — Environment-variable access.
repo/apps/cli/src/commands/connect.ts:108 
        options.daemonChild || isServiceChild || process.env.LOBEHUB_DAEMON === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd36999aaa33fc04 — Environment-variable access.
repo/apps/cli/src/commands/connect.ts:369 
  const channel = process.env.LOBEHUB_CLI_CHANNEL || 'cli';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #42d7078a01451bcc — Filesystem access.
repo/apps/cli/src/commands/doc.ts:18 
    return fs.readFileSync(options.bodyFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a49dbeedfb456cb — Filesystem access.
repo/apps/cli/src/commands/doc.ts:168 
        const raw = fs.readFileSync(file, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e12a1c6732d241a6 — Filesystem access.
repo/apps/cli/src/commands/file.test.ts:220 
      fs.writeFileSync(tmpFile, 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da80c661dd5f7d46 — Filesystem access.
repo/apps/cli/src/commands/file.test.ts:257 
      fs.writeFileSync(tmpFile, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #218a4b7e42562a60 — Filesystem access.
repo/apps/cli/src/commands/file.test.ts:281 
      fs.writeFileSync(tmpFile, 'dedup me');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8528152a8fe48a5a — Filesystem access.
repo/apps/cli/src/commands/generate.test.ts:376 
      await fsWriteFile(bigPath, Buffer.alloc(4 * 1024 * 1024));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e099ad19b8aaa6c1 — Filesystem access.
repo/apps/cli/src/commands/generate/asr.ts:59 
            await writeFile(tempPath, downloaded.bytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e69d72092ff3736 — Filesystem access.
repo/apps/cli/src/commands/generate/asr.ts:90 
            const bytes = await readFile(localPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #84d12605ee58e4ce — Filesystem access.
repo/apps/cli/src/commands/generate/tts.ts:54 
        writeFileSync(options.output, buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a3bce1817b9b4125 — Filesystem access.
repo/apps/cli/src/commands/hetero.test.ts:463 
    await writeFile(
      file,
      JSON.stringify([
        { text: 'analyze', type: 'text' },
        { source: { type: 'url', url: 'https://x/y.png' }, type: 'image' },
      ]),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bca9fc7b5925d67a — Filesystem access.
repo/apps/cli/src/commands/hetero.test.ts:1156 
    const meta = JSON.parse(await readFile(path.join(sessionDir, 'meta.json'), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5adfb3d5369e1baa — Filesystem access.
repo/apps/cli/src/commands/hetero.test.ts:1160 
    const stderrDump = await readFile(path.join(sessionDir, 'attempt-1.stderr.log'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a1cd9e8ecbc6a3d — Filesystem access.
repo/apps/cli/src/commands/hetero.ts:143 
  return readFile(location, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e3b2f2160f1c2eba — Filesystem access.
repo/apps/cli/src/commands/hetero.ts:390 
      await writeFile(
        path.join(dir, 'meta.json'),
        `${JSON.stringify({ ...meta, operationId, startedAt: new Date().toISOString() }, null, 2)}\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8fc75c3777bbbe0b — Environment-variable access.
repo/apps/cli/src/commands/hetero.ts:496 
      process.env.LOBEHUB_ASSISTANT_MESSAGE_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aecf108088148bb8 — Filesystem access.
repo/apps/cli/src/commands/hetero.ts:531 
    await writeFile(
      askMcpConfigPath,
      JSON.stringify({
        mcpServers: {
          lobe_cc: {
            alwaysLoad: true,
            type: 'http',
            url: askServer.urlForOperation(operationId),
          },
        },
      }),
      'utf8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36101f786e220104 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:44 
  const originalApiKey = process.env.LOBEHUB_CLI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0830fe3b2f166603 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:45 
  const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7240614d6a83bafc — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:46 
  const originalPathext = process.env.PATHEXT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83ac221212456cfe — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:47 
  const originalSystemRoot = process.env.SystemRoot;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed5939d00090d445 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:54 
    delete process.env.LOBEHUB_CLI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c4bd60900facb6b1 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:60 
    process.env.LOBEHUB_CLI_API_KEY = originalApiKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e650e476cd3a18b5 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:61 
    process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3019db2efec8b944 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:62 
    process.env.PATHEXT = originalPathext;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #114cc0954cbf306e — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:63 
    process.env.SystemRoot = originalSystemRoot;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3c0f4cce24cf3117 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:145 
    process.env.LOBEHUB_CLI_API_KEY = 'sk-lh-env-test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0e6d0be225e3a33 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:187 
    process.env.LOBEHUB_CLI_API_KEY = 'sk-lh-env-test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43c4a1049ae03b3a — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:346 
    process.env.PATH = 'C:\\Tools';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f7f7f295ea408b40 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:347 
    process.env.PATHEXT = '.EXE;.CMD';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #187a0fa3bbcd061c — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:348 
    process.env.SystemRoot = 'C:\\Windows';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b8ee7dcb0c2b3521 — Environment-variable access.
repo/apps/cli/src/commands/login.ts:65 
      const apiKey = process.env[CLI_API_KEY_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93f9165b1ac576c9 — Environment-variable access.
repo/apps/cli/src/commands/login.ts:270 
  const pathValue = process.env.PATH || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3251016330f66162 — Environment-variable access.
repo/apps/cli/src/commands/login.ts:275 
    const pathext = (process.env.PATHEXT || '.COM;.EXE;.BAT;.CMD').split(';').filter(Boolean);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c64d033fc9360694 — Environment-variable access.
repo/apps/cli/src/commands/login.ts:280 
    const systemRoot = process.env.SystemRoot || process.env.WINDIR;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #03da8244842c2a1a — Filesystem access.
repo/apps/cli/src/commands/migrate/openclaw.test.ts:71 
  fs.writeFileSync(fullPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a52ae9f4bf22385 — Filesystem access.
repo/apps/cli/src/commands/migrate/openclaw.test.ts:277 
      fs.writeFileSync(binPath, Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x00, 0x00, 0x01]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed7a1bce8b6acdda — Filesystem access.
repo/apps/cli/src/commands/migrate/openclaw.ts:198 
    const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7771a8adce882d6 — Filesystem access.
repo/apps/cli/src/commands/migrate/openclaw.ts:231 
    ig.add(fs.readFileSync(gitignorePath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6258ed23f23946fe — Filesystem access.
repo/apps/cli/src/commands/migrate/openclaw.ts:432 
            const content = fs.readFileSync(fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #20069e51127eecb8 — Filesystem access.
repo/apps/cli/src/commands/topic.ts:149 
        const content = fs.readFileSync(options.file, 'utf8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #601c18f7c1cf2821 — Environment-variable access.
repo/apps/cli/src/commands/update.ts:31 
  const ua = process.env.npm_config_user_agent;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a17f20f43eca4b82 — Filesystem access.
repo/apps/cli/src/commands/verify.test.ts:211 
    expect(readFileSync(path.join(skillDir, 'SKILL.md'), 'utf8')).toBe('# Verify SKILL');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37ce1d342c565fc6 — Filesystem access.
repo/apps/cli/src/commands/verify.test.ts:212 
    expect(readFileSync(path.join(skillDir, 'references/plan-format.md'), 'utf8')).toBe('plan');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a7a4490fb75d18cf — Filesystem access.
repo/apps/cli/src/commands/verify.test.ts:213 
    expect(readFileSync(path.join(skillDir, 'surfaces/cli.md'), 'utf8')).toBe('cli');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eac9b74033c604ca — Filesystem access.
repo/apps/cli/src/commands/verify.test.ts:229 
    expect(readFileSync(skillFile, 'utf8')).toBe('# Verify SKILL');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db96f597577d94a5 — Filesystem access.
repo/apps/cli/src/commands/verify.test.ts:232 
    expect(readFileSync(skillFile, 'utf8')).toBe('# Updated SKILL');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #214817774eb4ebdf — Filesystem access.
repo/apps/cli/src/commands/verify.test.ts:466 
    writeFileSync(path.join(dir, 'result.json'), JSON.stringify({ cases: [] }));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #10a485c3c2ea96fc — Filesystem access.
repo/apps/cli/src/commands/verify.test.ts:468 
    writeFileSync(path.join(dir, '.verify-run.json'), JSON.stringify({ verifyRunId: 'run-old' }));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f17968615baa1c3 — Environment-variable access.
repo/apps/cli/src/commands/verify.test.ts:569 
    process.env.LOBEHUB_AGENT_ID = 'agt_1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ec8c2946a6251b6 — Environment-variable access.
repo/apps/cli/src/commands/verify.test.ts:570 
    process.env.LOBEHUB_TOPIC_ID = 'tpc_1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #94ed19d50dc3691f — Environment-variable access.
repo/apps/cli/src/commands/verify.test.ts:571 
    process.env.LOBEHUB_OPERATION_ID = 'op_1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #54660faf63c24925 — Environment-variable access.
repo/apps/cli/src/commands/verify.test.ts:584 
    process.env.LOBEHUB_OPERATION_ID = 'op_authoring_run';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5062eb8da340d7bf — Environment-variable access.
repo/apps/cli/src/commands/verify.test.ts:592 
    delete process.env.LOBEHUB_AGENT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75a52d884c49f5d2 — Environment-variable access.
repo/apps/cli/src/commands/verify.test.ts:593 
    delete process.env.LOBEHUB_TOPIC_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd1777fd3d5caa91 — Environment-variable access.
repo/apps/cli/src/commands/verify.test.ts:594 
    delete process.env.LOBEHUB_OPERATION_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef1e4a9679d676df — Filesystem access.
repo/apps/cli/src/commands/verify.ts:78 
    const buffer = readFileSync(file);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #770cd60212dc1ec8 — Environment-variable access.
repo/apps/cli/src/commands/verify.ts:381 
    agentId: firstString(process.env.LOBEHUB_AGENT_ID),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e7c1802abecabb1 — Environment-variable access.
repo/apps/cli/src/commands/verify.ts:382 
    operationId: firstString(process.env.LOBEHUB_OPERATION_ID),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #174fe07fe0292584 — Environment-variable access.
repo/apps/cli/src/commands/verify.ts:383 
    topicId: firstString(process.env.LOBEHUB_TOPIC_ID),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2babc6c313379470 — Filesystem access.
repo/apps/cli/src/commands/verify.ts:471 
    const parsed = JSON.parse(readFileSync(p, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0615415cc5d7cbb9 — Filesystem access.
repo/apps/cli/src/commands/verify.ts:480 
    writeFileSync(path.join(dir, RUN_SIDECAR), `${JSON.stringify({ verifyRunId }, null, 2)}\n`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c5cbfb867db1758 — Filesystem access.
repo/apps/cli/src/commands/verify.ts:533 
          writeFileSync(dest, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7391bbbff4836e88 — Filesystem access.
repo/apps/cli/src/commands/verify.ts:1390 
          result = JSON.parse(readFileSync(resultPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5597c2b2da8fa65c — Filesystem access.
repo/apps/cli/src/commands/verify.ts:1399 
        const content = existsSync(reportMdPath) ? readFileSync(reportMdPath, 'utf8') : undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cdf451cec1bf602a — Filesystem access.
repo/apps/cli/src/daemon/manager.test.ts:72 
      await writeFile(path.join(mockDir, 'daemon.pid'), 'not-a-number');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7487c999c185ebfb — Filesystem access.
repo/apps/cli/src/daemon/manager.test.ts:217 
      const content = fs.readFileSync(getLogPath(), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f9aeb0c004bac990 — Filesystem access.
repo/apps/cli/src/daemon/manager.test.ts:228 
      await writeFile(logPath, bigContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c93e374517af7531 — Filesystem access.
repo/apps/cli/src/daemon/manager.test.ts:240 
      await writeFile(logPath, 'small content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7da0eaa32ee820d5 — Filesystem access.
repo/apps/cli/src/daemon/manager.test.ts:245 
      expect(fs.readFileSync(logPath, 'utf8')).toBe('small content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9fd6849ea2a7b51e — Filesystem access.
repo/apps/cli/src/daemon/manager.ts:40 
    const raw = fs.readFileSync(getPidPath(), 'utf8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17822f0e0569695a — Filesystem access.
repo/apps/cli/src/daemon/manager.ts:50 
  fs.writeFileSync(getPidPath(), String(pid), { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e64acf47ae53bea3 — Filesystem access.
repo/apps/cli/src/daemon/manager.ts:123 
  fs.writeFileSync(getStatusPath(), JSON.stringify(status, null, 2), { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ef67d2a96f2d6fb — Filesystem access.
repo/apps/cli/src/daemon/manager.ts:128 
    return JSON.parse(fs.readFileSync(getStatusPath(), 'utf8')) as DaemonStatus;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79c672b3cfdb41e5 — Filesystem access.
repo/apps/cli/src/daemon/taskRegistry.ts:26 
    return JSON.parse(fs.readFileSync(getRegistryPath(), 'utf8')) as Record<string, TaskEntry>;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3bf62a5721938cc8 — Filesystem access.
repo/apps/cli/src/daemon/taskRegistry.ts:35 
  fs.writeFileSync(getRegistryPath(), JSON.stringify(entries, null, 2), { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4ccc6794893412fd — Filesystem access.
repo/apps/cli/src/man/generate.ts:14 
  writeFile(`${outputDir}lh.1`, generateRootManPage(program, cliVersion)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d6948a6c238e8baa — Filesystem access.
repo/apps/cli/src/man/generate.ts:15 
  writeFile(`${outputDir}lobe.1`, generateAliasManPage('lh')),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #619bb070b2e57c23 — Filesystem access.
repo/apps/cli/src/man/generate.ts:16 
  writeFile(`${outputDir}lobehub.1`, generateAliasManPage('lh')),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b08c0e24483ad56a — Filesystem access.
repo/apps/cli/src/service/connect.test.ts:52 
    fs.writeFileSync(entryPath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f61492540a6c52c0 — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:60 
    delete process.env.LOBEHUB_CLI_HOME;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aee2925a665f5155 — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:61 
    delete process.env.LOBEHUB_CLI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #acf7da6129db634d — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:62 
    delete process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a1f1442afcc28e9 — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:63 
    delete process.env.ANTHROPIC_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac5f4cdcf8699757 — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:64 
    delete process.env.AWS_SECRET_ACCESS_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9dd43ccbc15ff471 — Filesystem access.
repo/apps/cli/src/service/connect.test.ts:103 
    expect(fs.readFileSync(unitPath, 'utf8')).toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af49c1a86d786143 — Filesystem access.
repo/apps/cli/src/service/connect.test.ts:106 
    expect(fs.readFileSync(unitPath, 'utf8')).toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #616d49160c8c5655 — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:142 
    process.env.ANTHROPIC_API_KEY = 'anthropic-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #609351d59a844c59 — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:143 
    process.env.AWS_SECRET_ACCESS_KEY = 'aws-secret';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b67c6d893b0fd99c — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:144 
    process.env.LOBEHUB_CLI_API_KEY = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5a57c7ca6760b465 — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:145 
    process.env.QUOTED_ENV = 'value with "quotes", \\slashes, and $dollars';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #431fb3b2468d137f — Filesystem access.
repo/apps/cli/src/service/connect.test.ts:150 
    const envFile = fs.readFileSync(envFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca298e54318d4425 — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:168 
    process.env.LOBEHUB_CLI_API_KEY = 'rotated-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a68a18cbc9223c7f — Filesystem access.
repo/apps/cli/src/service/connect.test.ts:172 
    expect(fs.readFileSync(path.join(tmpDir, '.lobehub', 'connect-service.env'), 'utf8')).toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1370ed4c1634bc59 — Environment-variable access.
repo/apps/cli/src/service/connect.ts:35 
    process.env.LOBEHUB_CONNECT_SERVICE_UNIT_DIR ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da572064e30af493 — Environment-variable access.
repo/apps/cli/src/service/connect.ts:41 
  return path.join(os.homedir(), process.env.LOBEHUB_CLI_HOME || '.lobehub');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c901200d267750a — Filesystem access.
repo/apps/cli/src/service/connect.ts:144 
  fs.writeFileSync(envFilePath, `${lines.join('\n')}\n`, { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a79c2283458df78 — Environment-variable access.
repo/apps/cli/src/service/connect.ts:162 
  if (process.env.LOBEHUB_JWT || process.env[CLI_API_KEY_ENV] || loadCredentials()) return;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #288c53cf75e5741d — Filesystem access.
repo/apps/cli/src/service/connect.ts:176 
  fs.writeFileSync(path.join(getUserServiceDir(), SERVICE_NAME), renderUnit(), { mode: 0o644 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ae37684cd8639c3 — Environment-variable access.
repo/apps/cli/src/settings/index.test.ts:19 
const originalServer = process.env.LOBEHUB_SERVER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9edb0217ba3686ec — Environment-variable access.
repo/apps/cli/src/settings/index.test.ts:41 
    delete process.env.LOBEHUB_SERVER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #286ec50344e6ef94 — Environment-variable access.
repo/apps/cli/src/settings/index.test.ts:46 
    process.env.LOBEHUB_SERVER = originalServer;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da5756d8ff84f640 — Filesystem access.
repo/apps/cli/src/settings/index.test.ts:71 
    fs.writeFileSync(settingsFile, '{invalid json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #485743f9be5b9703 — Environment-variable access.
repo/apps/cli/src/settings/index.test.ts:86 
    process.env.LOBEHUB_SERVER = 'https://env.example.com/';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f13c552a47b7fe3f — Environment-variable access.
repo/apps/cli/src/settings/index.ts:15 
const LOBEHUB_DIR_NAME = process.env.LOBEHUB_CLI_HOME || '.lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f8ee70bb736b5df — Environment-variable access.
repo/apps/cli/src/settings/index.ts:31 
  const envServerUrl = normalizeUrl(process.env.LOBEHUB_SERVER);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d47312280e6e3a62 — Environment-variable access.
repo/apps/cli/src/settings/index.ts:38 
  const envUrl = normalizeUrl(process.env.AGENT_GATEWAY_URL);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #54d3227bd8321f6a — Filesystem access.
repo/apps/cli/src/settings/index.ts:64 
  fs.writeFileSync(SETTINGS_FILE, JSON.stringify(normalized, null, 2), { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #22491fc15f3ebaf9 — Filesystem access.
repo/apps/cli/src/settings/index.ts:76 
    const existing = fs.readFileSync(CONNECTION_ID_FILE, 'utf8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4b01a7a6a493c078 — Filesystem access.
repo/apps/cli/src/settings/index.ts:85 
    fs.writeFileSync(CONNECTION_ID_FILE, id, { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c3ffa89f1614872a — Filesystem access.
repo/apps/cli/src/settings/index.ts:99 
    const data = fs.readFileSync(WORKSPACE_ENROLLMENTS_FILE, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9aa4ae84038a4be — Filesystem access.
repo/apps/cli/src/settings/index.ts:115 
    fs.writeFileSync(WORKSPACE_ENROLLMENTS_FILE, JSON.stringify(workspaceIds, null, 2), {
      mode: 0o600,
    });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3e14a532d2d41360 — Filesystem access.
repo/apps/cli/src/settings/index.ts:139 
    const data = fs.readFileSync(SETTINGS_FILE, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c92a54396cbafab — Filesystem access.
repo/apps/cli/src/tools/file.test.ts:40 
    await writeFile(filePath, 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #29f55f0f8573ec0d — Filesystem access.
repo/apps/cli/src/tools/file.test.ts:54 
    expect(fs.readFileSync(filePath, 'utf8')).toBe('written');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9870db8c626b2d38 — Filesystem access.
repo/apps/cli/src/tools/file.test.ts:59 
    await writeFile(filePath, 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b4d6650d729086fb — Filesystem access.
repo/apps/cli/src/tools/file.test.ts:72 
    await writeFile(path.join(tmpDir, 'a.txt'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #655fea7279616517 — Filesystem access.
repo/apps/cli/src/tools/file.test.ts:80 
    await writeFile(path.join(tmpDir, 'a.ts'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0ca60d709e0ee81 — Filesystem access.
repo/apps/cli/src/tools/file.test.ts:81 
    await writeFile(path.join(tmpDir, 'b.js'), 'b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b16d2a30f2c7aacd — Filesystem access.
repo/apps/cli/src/tools/file.test.ts:90 
    await writeFile(path.join(tmpDir, 'search.txt'), 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #733015146cc4db1e — Filesystem access.
repo/apps/cli/src/tools/file.test.ts:99 
    await writeFile(path.join(tmpDir, 'config.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c65a13e864d666ee — Filesystem access.
repo/apps/cli/src/tools/getAgentProfile.ts:32 
    const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88c2009aa59d93d4 — Filesystem access.
repo/apps/cli/src/tools/getAgentProfile.ts:126 
    const content = fs.readFileSync(soulPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5078416d19d6fbe — Environment-variable access.
repo/apps/cli/src/tools/heteroTask.ts:16 
const LOBEHUB_DIR_NAME = process.env.LOBEHUB_CLI_HOME || '.lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d4d29ccfb74b957 — Filesystem access.
repo/apps/cli/src/tools/heteroTask.ts:21 
    const data = JSON.parse(fs.readFileSync(HERMES_SESSIONS_FILE, 'utf8')) as Record<

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d64472ed23686f5 — Filesystem access.
repo/apps/cli/src/tools/heteroTask.ts:34 
    data = JSON.parse(fs.readFileSync(HERMES_SESSIONS_FILE, 'utf8')) as Record<string, string>;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3aa0428083ec94a3 — Filesystem access.
repo/apps/cli/src/tools/heteroTask.ts:40 
  fs.writeFileSync(HERMES_SESSIONS_FILE, JSON.stringify(data), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #995b1d3a0c6424fb — Environment-variable access.
repo/apps/cli/src/tools/heteroTask.ts:171 
    const openclawAgent = process.env.OPENCLAW_AGENT_ID ?? 'main';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d1cb27321770efef — Filesystem access.
repo/apps/cli/src/tools/index.test.ts:35 
    await writeFile(filePath, 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a7eb4374a49f32ce — Filesystem access.
repo/apps/cli/src/tools/index.test.ts:56 
    expect(fs.readFileSync(filePath, 'utf8')).toBe('written');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #20fc3a85f14e6531 — Filesystem access.
repo/apps/cli/src/tools/index.test.ts:61 
    await writeFile(filePath, 'legacy hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b7d64235eb1a8f9b — Filesystem access.
repo/apps/cli/src/tools/index.test.ts:114 
    await writeFile(filePath, 'old content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f82b86e2b393d61 — Filesystem access.
repo/apps/cli/src/tools/index.test.ts:127 
    expect(fs.readFileSync(filePath, 'utf8')).toBe('new content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6240cbd05b02b995 — Filesystem access.
repo/apps/cli/src/tools/index.test.ts:139 
    await writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb4b1e6fc1f7a125 — Filesystem access.
repo/apps/cli/src/tools/index.test.ts:157 
    await writeFile(path.join(tmpDir, 'grep.txt'), `${pattern} here`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f2e9ea555fb6eaea — Environment-variable access.
repo/apps/cli/src/tools/isolatedWorker.ts:8 
  ISOLATED_TOOL_APIS.has(apiName) && process.env[TOOL_WORKER_ENV] !== '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f5f5bf907118c0b — Filesystem access.
repo/apps/cli/src/tools/localSystemRuntime.ts:141 
      return runtime.readFile({
        endLine: p.loc?.[1],
        path: p.path,
        startLine: p.loc?.[0],
      });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae1eb1bbb7ae40d5 — Filesystem access.
repo/apps/cli/src/tools/localSystemRuntime.ts:149 
      return runtime.writeFile(args as WriteFileParams);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e9a6971922c490d4 — Environment-variable access.
repo/apps/cli/src/utils/completion.ts:120 
  const fallbackShell = process.env.SHELL?.split('/').pop() || 'zsh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cbfa48fc89da8e93 — Filesystem access.
repo/apps/cli/src/utils/uploadLocalFile.ts:143 
  const fileBuffer = fs.readFileSync(resolved);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9c02daf26a773610 — Environment-variable access.
repo/apps/cli/tsdown.config.ts:12 
  minify: !!process.env.MINIFY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #caccfb5ef2db9fd0 — Filesystem access.
repo/apps/desktop/electron-builder.mjs:24 
const packageJSON = JSON.parse(await fs.readFile(path.join(__dirname, 'package.json'), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #744b9ce5709610a0 — Environment-variable access.
repo/apps/desktop/electron-builder.mjs:26 
const channel = process.env.UPDATE_CHANNEL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #031d426415106b9f — Environment-variable access.
repo/apps/desktop/electron-builder.mjs:28 
const hasAppleCertificate = Boolean(process.env.CSC_LINK);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #caa417ff9931c0c0 — Environment-variable access.
repo/apps/desktop/electron-builder.mjs:31 
const updateServerUrl = process.env.UPDATE_SERVER_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4cd17b3007caf76a — Environment-variable access.
repo/apps/desktop/electron-builder.mjs:82 
  process.env.CSC_IDENTITY_AUTO_DISCOVERY = 'false';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ebe5a6b1587cc9c4 — Filesystem access.
repo/apps/desktop/electron-builder.mjs:132 
      await fs.readFile(path.resolve(__dirname, '../cli/package.json'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2849e692e029ec3e — Filesystem access.
repo/apps/desktop/electron-builder.mjs:134 
    await fs.writeFile(
      path.resolve(__dirname, 'resources/cli-package.json'),
      JSON.stringify({ name: cliPkg.name, type: 'module', version: cliPkg.version }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #69acb6ba092285c1 — Environment-variable access.
repo/apps/desktop/electron-builder.mjs:326 
    releaseNotes: process.env.RELEASE_NOTES || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1739a9fac6aa6db1 — Filesystem access.
repo/apps/desktop/module-deps.config.mjs:31 
    const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d7197936e64df06 — Environment-variable access.
repo/apps/desktop/native-deps.config.mjs:27 
  return process.env.npm_config_platform || os.platform();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76640c85595aa660 — Environment-variable access.
repo/apps/desktop/scripts/dev.mjs:12 
const VITE_PORT = Number(process.env.LOBE_DESKTOP_VITE_PORT) || 5173;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ce1296efd3602cb — Environment-variable access.
repo/apps/desktop/scripts/fix-electron-runtime.mjs:58 
  const configuredArch = process.env.npm_config_arch;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f83e819fd54f8e0 — Filesystem access.
repo/apps/desktop/scripts/fix-electron-runtime.mjs:76 
    const installedVersion = readFileSync(
      path.join(electronDir, 'dist', 'version'),
      'utf8',
    ).replace(/^v/, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #627592e8c08961db — Filesystem access.
repo/apps/desktop/scripts/fix-electron-runtime.mjs:80 
    const installedPath = readFileSync(path.join(electronDir, 'path.txt'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88d2607d84600ca1 — Environment-variable access.
repo/apps/desktop/scripts/fix-electron-runtime.mjs:135 
  const platform = process.env.npm_config_platform || process.platform;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a19a978b4ba639d5 — Environment-variable access.
repo/apps/desktop/scripts/fix-electron-runtime.mjs:153 
    cacheRoot: process.env.electron_config_cache,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #445c79726bf180ce — Environment-variable access.
repo/apps/desktop/scripts/fix-electron-runtime.mjs:155 
      process.env.electron_use_remote_checksums ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #09c8f14c7084a7cd — Environment-variable access.
repo/apps/desktop/scripts/fix-electron-runtime.mjs:156 
      process.env.npm_config_electron_use_remote_checksums

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #01f10f168d505d07 — Filesystem access.
repo/apps/desktop/scripts/fix-electron-runtime.mjs:168 
  writeFileSync(path.join(electronDir, 'path.txt'), platformPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #29743d5ad20502f9 — Filesystem access.
repo/apps/desktop/scripts/i18nWorkflow/utils.ts:9 
  const data = readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #faa249df41d3247f — Filesystem access.
repo/apps/desktop/scripts/i18nWorkflow/utils.ts:15 
  writeFileSync(filePath, jsonStr, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c50d0be9900ebdd2 — Environment-variable access.
repo/apps/desktop/vite.main.config.ts:19 
  const updateChannel = process.env.UPDATE_CHANNEL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #58aabe25bf2693fa — Environment-variable access.
repo/apps/desktop/vite.main.config.ts:20 
  const isCloudDesktopBuild = process.env.CLOUD_DESKTOP === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #173879a9e2f9851b — Environment-variable access.
repo/apps/desktop/vite.main.config.ts:22 
    process.env.DESKTOP_EXTERNAL_NAVIGATION_HOSTS ?? (isCloudDesktopBuild ? 'stripe.com' : '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4a41f9414f80ea7e — Environment-variable access.
repo/apps/desktop/vite.main.config.ts:104 
      'process.env.UPDATE_CHANNEL': JSON.stringify(process.env.UPDATE_CHANNEL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f65643aaec958174 — Environment-variable access.
repo/apps/desktop/vite.main.config.ts:105 
      'process.env.UPDATE_SERVER_URL': JSON.stringify(process.env.UPDATE_SERVER_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f4696e705ea59ab7 — Filesystem access.
repo/apps/desktop/vite.renderer.config.ts:164 
      return injectDynamicBusinessFeatureFlag(readFileSync(sourcePath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d544c72f5355e56 — Environment-variable access.
repo/apps/desktop/vite.shared.ts:12 
export const isCloudDesktopBuild = process.env.CLOUD_DESKTOP === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0bbd9081a7de6a56 — Environment-variable access.
repo/apps/desktop/vite.shared.ts:18 
export const DEV_VITE_PORT = Number(process.env.LOBE_DESKTOP_VITE_PORT) || 5173;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #154fa91f04d4eae1 — Filesystem access.
repo/apps/desktop/vite.shared.ts:25 
  readFileSync(path.resolve(__dirname, 'package.json'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e4fe7000a1c583e — Environment-variable access.
repo/drizzle.config.ts:10 
let connectionString = process.env.DATABASE_URL!;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6be1968212398cd3 — Environment-variable access.
repo/next.config.ts:3 
const isVercel = !!process.env.VERCEL_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ccdfc060012e618f — Filesystem access.
repo/plugins/vite/envRestartKeys.ts:36 
      for (const line of readFileSync(file, 'utf8').split('\n')) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de554635e0bde7d3 — Filesystem access.
repo/plugins/vite/markdownImport.test.ts:15 
    await writeFile(markdownPath, markdownContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c0fc0f3f9aff016 — Filesystem access.
repo/plugins/vite/markdownImport.ts:35 
      const content = await readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #385cfab29be53f89 — Environment-variable access.
repo/plugins/vite/routeChunkPreload.ts:387 
function appendDeploymentQuery(href: string, deploymentId = process.env.VERCEL_DEPLOYMENT_ID) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #80746b3cdf5d6a7d — Environment-variable access.
repo/plugins/vite/routeChunkPreload.ts:566 
        const deploymentId = process.env.VERCEL_DEPLOYMENT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b64f99c43be4b389 — Environment-variable access.
repo/plugins/vite/sharedRendererConfig.ts:199 
const isDev = process.env.NODE_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28128c2de464a5de — Environment-variable access.
repo/plugins/vite/sharedRendererConfig.ts:200 
const enableRouteChunkPreload = process.env.LOBE_ROUTE_CHUNK_PRELOAD !== 'false';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #125e1ee945b312ec — Environment-variable access.
repo/plugins/vite/sharedRendererConfig.ts:241 
    '__CI__': process.env.CI === 'true' ? 'true' : 'false',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e74e4e0207f8a8ca — Environment-variable access.
repo/plugins/vite/sharedRendererConfig.ts:242 
    '__DEV__': process.env.NODE_ENV !== 'production' ? 'true' : 'false',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0179f6b038949ae — Environment-variable access.
repo/plugins/vite/sharedRendererConfig.ts:245 
    '__REACT_SCAN__': process.env.REACT_SCAN === 'true' ? 'true' : 'false',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a108976927b99b3 — Environment-variable access.
repo/plugins/vite/vercelSkewProtection.ts:28 
  const id = deploymentId || process.env.VERCEL_DEPLOYMENT_ID || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f57337351e8b7444 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:35 
        (key) => process.env[key],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #84b48c924f9441e5 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:54 
      ].filter((key) => process.env[key]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0086f4b75560c86 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:59 
    getVars: () => (process.env['NEXT_PUBLIC_SERVICE_MODE'] ? ['NEXT_PUBLIC_SERVICE_MODE'] : []),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05d3f235cbd12c3c — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:65 
    getVars: () => (process.env['ACCESS_CODE'] ? ['ACCESS_CODE'] : []),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #088f4c6127789ae3 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:72 
      process.env['NEXT_PUBLIC_ENABLE_BETTER_AUTH'] ? ['NEXT_PUBLIC_ENABLE_BETTER_AUTH'] : [],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd2858697fec08ec — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:78 
    getVars: () => ['NEXT_PUBLIC_AUTH_URL', 'AUTH_URL'].filter((key) => process.env[key]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #80a4b8d2d741936d — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:104 
      ].filter((key) => process.env[key]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5aaeecd20ac38bb2 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:120 
        (key) => process.env[key],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #72847f37e074389c — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:127 
    getVars: () => (process.env['OIDC_JWKS_KEY'] ? ['OIDC_JWKS_KEY'] : []),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bad3e7ac68339ead — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:133 
    getVars: () => (process.env['APP_URL']?.endsWith('/') ? ['APP_URL'] : []),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #25f9adfb897218d8 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:141 
      const providers = process.env['AUTH_SSO_PROVIDERS'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #40cdd0350dded76b — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:142 
      if (providers.includes('casdoor') && !process.env['CASDOOR_WEBHOOK_SECRET']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e66bcf38e1efc3c5 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:155 
      const providers = process.env['AUTH_SSO_PROVIDERS'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8dfa0d835106717a — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:156 
      if (providers.includes('logto') && !process.env['LOGTO_WEBHOOK_SIGNING_KEY']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b6bb1ef38d06bbd7 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:183 
      ].filter((key) => process.env[key]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2fa27226404ece2 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:192 
        process.env['SMTP_HOST'] || process.env['EMAIL_SERVICE_PROVIDER'] === 'resend';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ebbd18ef02923b2a — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:193 
      const hasEmailVerification = process.env['AUTH_EMAIL_VERIFICATION'] === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2f3f6f3315a855a — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:35 
    process.env.NEXT_AUTH_SECRET = 'test-secret';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ff37f04f28709f5 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:45 
    process.env.NEXTAUTH_SECRET = 'test-secret';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b44025e3167e334 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:54 
    process.env.CLERK_SECRET_KEY = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d269168bc338fb39 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:63 
    process.env.ACCESS_CODE = 'test-code';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0848f006aa115356 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:72 
    process.env.APP_URL = 'https://example.com/';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b8e4d27b94dc34c — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:81 
    process.env.APP_URL = 'https://example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46c72b65babaf029 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:91 
      process.env.AUTH_SSO_PROVIDERS = 'casdoor';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb9f52ea91294949 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:102 
      process.env.AUTH_SSO_PROVIDERS = 'logto';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a4daad4b814a648a — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:113 
      process.env.AUTH_SSO_PROVIDERS = 'casdoor';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1dd37fb01a05245b — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:114 
      process.env.CASDOOR_WEBHOOK_SECRET = 'test-secret';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #177c3655b5b9b99b — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:124 
      process.env.AUTH_SSO_PROVIDERS = 'logto';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5fc9426a6eee7aa8 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:125 
      process.env.LOGTO_WEBHOOK_SIGNING_KEY = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9dbb22e94d86692a — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:135 
      process.env.AUTH_SSO_PROVIDERS = 'google';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b04fc9b04b86d89 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:147 
      process.env.AUTH_SSO_PROVIDERS = 'logto'; // warning

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c8df132c7e3003c — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:148 
      process.env.ACCESS_CODE = 'test-code'; // error

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee3bb09b42402361 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:161 
      process.env.ACCESS_CODE = 'test-code';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #45069dfda4bddc25 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:171 
      process.env.ACCESS_CODE = 'test-code';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f3756e749115f10 — Filesystem access.
repo/scripts/cdnWorkflow/index.ts:47 
      this.cache = JSON.parse(readFileSync(CACHE_FILE, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e5ca0ff1484a79a — Filesystem access.
repo/scripts/cdnWorkflow/index.ts:56 
      writeFileSync(CACHE_FILE, JSON.stringify(this.cache, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #783b79c2cbed973b — Filesystem access.
repo/scripts/cdnWorkflow/index.ts:65 
      const mdx = readFileSync(post, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d4f7166dd590d8e — Environment-variable access.
repo/scripts/cdnWorkflow/index.ts:119 
        cdnLinks[link] = cdnUrl.replaceAll(process.env.DOC_S3_PUBLIC_DOMAIN || '', '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #22302c0d4e89dd7a — Filesystem access.
repo/scripts/cdnWorkflow/index.ts:147 
      const mdx = readFileSync(post, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3ba2ed3e62bcd983 — Filesystem access.
repo/scripts/cdnWorkflow/index.ts:170 
      writeFileSync(post, matter.stringify(content, data));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #615a0a2863999e7a — Environment-variable access.
repo/scripts/cdnWorkflow/uploader.ts:10 
if (!process.env.DOC_S3_ACCESS_KEY_ID) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83af5fd924b5cb48 — Environment-variable access.
repo/scripts/cdnWorkflow/uploader.ts:16 
if (!process.env.DOC_S3_SECRET_ACCESS_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #55abdddc28bb8b2f — Environment-variable access.
repo/scripts/cdnWorkflow/uploader.ts:22 
if (!process.env.DOC_S3_PUBLIC_DOMAIN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba3d863f674f02c3 — Environment-variable access.
repo/scripts/cdnWorkflow/uploader.ts:44 
    accessKeyId: process.env.DOC_S3_ACCESS_KEY_ID || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b9cbcda368129cd — Environment-variable access.
repo/scripts/cdnWorkflow/uploader.ts:47 
    pathPrefix: process.env.DOC_S3_PUBLIC_DOMAIN || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #022da6c891a1d71d — Environment-variable access.
repo/scripts/cdnWorkflow/uploader.ts:50 
    secretAccessKey: process.env.DOC_S3_SECRET_ACCESS_KEY || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0050f3955871028 — Filesystem access.
repo/scripts/changelogWorkflow/buildStaticChangelog.ts:119 
      const data = readFileSync(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #71323fdbc0e1c296 — Filesystem access.
repo/scripts/changelogWorkflow/generateChangelog.ts:160 
  const version = JSON.parse(readFileSync(pkgPath, 'utf8')).version;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d935aac08ece812 — Filesystem access.
repo/scripts/changelogWorkflow/generateChangelog.ts:199 
  const currentFile = readFileSync(changelogPath, 'utf8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b55a581901ea8472 — Filesystem access.
repo/scripts/changelogWorkflow/generateChangelog.ts:205 
  writeFileSync(changelogPath, newContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #309140fe1949d87b — Environment-variable access.
repo/scripts/clerk-to-betterauth/_internal/config.ts:9 
  const mode = process.env.CLERK_TO_BETTERAUTH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #075b835c955d7afb — Environment-variable access.
repo/scripts/clerk-to-betterauth/_internal/config.ts:29 
  const value = process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a58e629c43f376b6 — Environment-variable access.
repo/scripts/clerk-to-betterauth/_internal/config.ts:43 
  const value = process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #df570701a83463af — Environment-variable access.
repo/scripts/clerk-to-betterauth/_internal/config.ts:53 
  const driver = process.env.CLERK_TO_BETTERAUTH_DATABASE_DRIVER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d9a462c7468ef5f — Filesystem access.
repo/scripts/clerk-to-betterauth/_internal/load-data-from-files.ts:50 
  const csv = await readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62da15028f1181f0 — Filesystem access.
repo/scripts/clerk-to-betterauth/_internal/load-data-from-files.ts:59 
    const file = await readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #32b1fc3e30dac11c — Environment-variable access.
repo/scripts/clerk-to-betterauth/export-clerk-users-with-api.ts:19 
const CONCURRENCY = Number(process.env.CLERK_EXPORT_CONCURRENCY ?? 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52f4f5796bb8038a — Environment-variable access.
repo/scripts/clerk-to-betterauth/export-clerk-users-with-api.ts:20 
const MAX_RETRIES = Number(process.env.CLERK_EXPORT_RETRIES ?? 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de39658e0ca1b8fe — Filesystem access.
repo/scripts/clerk-to-betterauth/export-clerk-users-with-api.ts:203 
  await writeFile(outputPath, JSON.stringify(clerkUsers, null, 2), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d1e3899551284ada — Environment-variable access.
repo/scripts/clerk-to-betterauth/index.ts:9 
const BATCH_SIZE = Number(process.env.CLERK_TO_BETTERAUTH_BATCH_SIZE) || 300;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4296a9baddfdde4f — Environment-variable access.
repo/scripts/clerk-to-betterauth/index.ts:12 
  process.argv.includes('--dry-run') || process.env.CLERK_TO_BETTERAUTH_DRY_RUN === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a73717803d1f7b60 — Filesystem access.
repo/scripts/countEnWord.ts:48 
    const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f5536733a283831 — Filesystem access.
repo/scripts/docsWorkflow/autoCDN.ts:44 
      this.cache = JSON.parse(readFileSync(CACHE_FILE, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85e5c04dd0199d19 — Filesystem access.
repo/scripts/docsWorkflow/autoCDN.ts:53 
      writeFileSync(CACHE_FILE, JSON.stringify(this.cache, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3c6c85f264c983ef — Filesystem access.
repo/scripts/docsWorkflow/autoCDN.ts:62 
      const mdx = readFileSync(post, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc9a81e918230d19 — Environment-variable access.
repo/scripts/docsWorkflow/autoCDN.ts:98 
        cdnLinks[link] = cdnUrl.replaceAll(process.env.DOC_S3_PUBLIC_DOMAIN || '', '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be0614cf4da6aa2b — Filesystem access.
repo/scripts/docsWorkflow/autoCDN.ts:126 
      const mdx = readFileSync(post, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #568becc0283e41ea — Filesystem access.
repo/scripts/docsWorkflow/autoCDN.ts:149 
      writeFileSync(post, matter.stringify(content, data));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7cee3d8b84cb2649 — Filesystem access.
repo/scripts/docsWorkflow/utils.ts:14 
  const md = readFileSync(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24e7b7689805ff95 — Filesystem access.
repo/scripts/docsWorkflow/utils.ts:18 
  writeFileSync(path, result, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #334b13e9db403bd5 — Filesystem access.
repo/scripts/docsWorkflow/utils.ts:27 
  const md = readFileSync(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #18a79967dd75795c — Environment-variable access.
repo/scripts/docsWorkflow/utils.ts:87 
    const githubToken = process.env.GITHUB_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fbd746298a5dd591 — Filesystem access.
repo/scripts/electronWorkflow/buildDesktopChannel.ts:65 
    return await fs.readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ab764a480c18516 — Filesystem access.
repo/scripts/electronWorkflow/buildDesktopChannel.ts:73 
  await fs.writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac2c83e7305b097c — Filesystem access.
repo/scripts/electronWorkflow/mergeMacReleaseFiles.js:44 
      const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #505fc8ff065f08de — Filesystem access.
repo/scripts/electronWorkflow/mergeMacReleaseFiles.js:58 
    fs.writeFileSync(filePath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8824f126778c4ce7 — Filesystem access.
repo/scripts/hotfixWorkflow/index.ts:32 
    const pkg = JSON.parse(fs.readFileSync(PACKAGE_JSON_PATH, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #23ba44e697dcbd57 — Filesystem access.
repo/scripts/i18nWorkflow/analyzeUnusedKeys.ts:175 
    const content = fs.readFileSync(file, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea6b8c4865f871fd — Filesystem access.
repo/scripts/i18nWorkflow/analyzeUnusedKeys.ts:448 
  fs.writeFileSync(
    reportPath,
    JSON.stringify(
      {
        generatedAt: new Date().toISOString(),
        statistics: {
          totalKeys: allKeysCount,
          unusedKeys: unusedKeys.length,
          usageRate: ((usedKeysCount / allKeysCount) * 100).toFixed(2) + '%',
          usedKeys: usedKeysCount,
        },
        unusedKeys: unusedKeys.map((k) => ({
          filePath: k.filePath,
          fullKey: k.fullKey,
          key: k.key,
          namespace: k.namespace,
        })),
        unusedKeysByNamespace: Array.from(byNamespace.entries()).map(([ns, keys]) => ({
          count: keys.length,
          keys: keys.map((k) => k.key),
          namespace: ns,
        })),
      },
      null,
      2,
    ),
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7eeeb82173f4920e — Filesystem access.
repo/scripts/i18nWorkflow/cleanUnusedKeys.ts:137 
          fs.writeFileSync(filePath, newContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f22a385f9bd9ab3b — Filesystem access.
repo/scripts/i18nWorkflow/cleanUnusedKeys.ts:193 
        const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #065c3c7e014543a5 — Filesystem access.
repo/scripts/i18nWorkflow/cleanUnusedKeys.ts:213 
            fs.writeFileSync(filePath, JSON.stringify(translations, null, 2) + '\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c279514bb3a9fd28 — Filesystem access.
repo/scripts/i18nWorkflow/cleanUnusedKeys.ts:277 
  const reportContent = fs.readFileSync(reportPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #39adfe1ebf73ba55 — Filesystem access.
repo/scripts/i18nWorkflow/flattenLocaleKeys.ts:78 
  writeFileSync(filePath, formatted, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #70623f0d3981edc4 — Filesystem access.
repo/scripts/i18nWorkflow/flattenLocaleKeys.ts:87 
  writeFileSync(filePath, formatted, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d16256b5f4929c7d — Filesystem access.
repo/scripts/i18nWorkflow/flattenLocaleKeys.ts:116 
      const raw = readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #368dd9354c09b80b — Filesystem access.
repo/scripts/i18nWorkflow/utils.ts:13 
  const data = readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #629156904106373e — Filesystem access.
repo/scripts/i18nWorkflow/utils.ts:19 
  writeFileSync(filePath, jsonStr, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ffc751b54bad1ac2 — Filesystem access.
repo/scripts/i18nWorkflow/utils.ts:28 
  writeFileSync(filePath, formatted, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a79d7185b728e82 — Filesystem access.
repo/scripts/mdxWorkflow/index.ts:17 
      const mdx = readFileSync(post, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e420906a247d6d50 — Filesystem access.
repo/scripts/mdxWorkflow/index.ts:48 
      writeFileSync(post, matter.stringify(formatedContent, data));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #475e5c8ad6291754 — Filesystem access.
repo/scripts/migrate-spa-navigation.ts:39 
  const content = await readFile(fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91a0e55b3ba8f24a — Filesystem access.
repo/scripts/migrate-spa-navigation.ts:105 
    await writeFile(fullPath, newContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #523dcd9e3ef91b29 — Environment-variable access.
repo/scripts/migrateServerDB/docker.cjs:7 
if (!process.env.DATABASE_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef1d6a56fc563208 — Environment-variable access.
repo/scripts/migrateServerDB/docker.cjs:11 
const client = new Pool({ connectionString: process.env.DATABASE_URL });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24261924696a8ad0 — Environment-variable access.
repo/scripts/migrateServerDB/index.ts:16 
const env = process.env.NODE_ENV || 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b49b23a65b5d6cbf — Environment-variable access.
repo/scripts/migrateServerDB/index.ts:27 
  if (process.env.DATABASE_DRIVER === 'node') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26b0328fa2c509c0 — Environment-variable access.
repo/scripts/migrateServerDB/index.ts:38 
const connectionString = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88a59fc456a76c59 — Environment-variable access.
repo/scripts/mobileSpaWorkflow/index.ts:17 
  const value = process.env[name];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43370b94851317e1 — Environment-variable access.
repo/scripts/mobileSpaWorkflow/index.ts:27 
  const keyPrefix = (process.env.MOBILE_S3_KEY_PREFIX || `mobile/${timestamp}`).replaceAll(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1dfb1e748feaa3e0 — Environment-variable access.
repo/scripts/mobileSpaWorkflow/index.ts:60 
    region: process.env.MOBILE_S3_REGION || 'auto',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b19f9e5e75276156 — Filesystem access.
repo/scripts/mobileSpaWorkflow/template.ts:11 
  const html = readFileSync(sourcePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2cd140291e049c4c — Filesystem access.
repo/scripts/mobileSpaWorkflow/template.ts:24 
  writeFileSync(outputPath, output, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7621d8352ae29116 — Filesystem access.
repo/scripts/mobileSpaWorkflow/upload.ts:49 
      const buffer = readFileSync(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c3f223aafc3a4f5f — Environment-variable access.
repo/scripts/nextauth-to-betterauth/_internal/config.ts:10 
  const mode = process.env.NEXTAUTH_TO_BETTERAUTH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c693d4628cb3069e — Environment-variable access.
repo/scripts/nextauth-to-betterauth/_internal/config.ts:20 
  const value = process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #484b399b0f0fe509 — Environment-variable access.
repo/scripts/nextauth-to-betterauth/_internal/config.ts:30 
  const driver = process.env.NEXTAUTH_TO_BETTERAUTH_DATABASE_DRIVER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c62fb4f773ce291 — Environment-variable access.
repo/scripts/nextauth-to-betterauth/_internal/config.ts:36 
  return Number(process.env.NEXTAUTH_TO_BETTERAUTH_BATCH_SIZE) || 300;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ea68f55139bb246 — Environment-variable access.
repo/scripts/nextauth-to-betterauth/_internal/config.ts:40 
  return process.argv.includes('--dry-run') || process.env.NEXTAUTH_TO_BETTERAUTH_DRY_RUN === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #10ecbab6a995eb3e — Filesystem access.
repo/scripts/readmeWorkflow/utlis.ts:38 
  return readFileSync(getReadmePath(lang), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1034aad13eb7f09 — Filesystem access.
repo/scripts/readmeWorkflow/utlis.ts:42 
  writeFileSync(getReadmePath(lang), content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5e787d5ff2674fde — Environment-variable access.
repo/scripts/registerDesktopEnv.cjs:18 
const isDesktop = process.env.DESKTOP_BUILD === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3d2a412c7294fd5 — Filesystem access.
repo/scripts/releaseWorkflow/index.ts:28 
    const pkg = JSON.parse(fs.readFileSync(PACKAGE_JSON_PATH, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ecc6a76af532b05a — Filesystem access.
repo/scripts/replaceComponentImports.ts:90 
  const content = readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #57cef601174c7834 — Filesystem access.
repo/scripts/replaceComponentImports.ts:132 
      writeFileSync(filePath, newContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e807481b47bf16e1 — Environment-variable access.
repo/scripts/resetOnboarding/index.ts:19 
const env = process.env.NODE_ENV || 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ee23ea65eae928c — Environment-variable access.
repo/scripts/resetOnboarding/index.ts:33 
  if (!process.env.DATABASE_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac6f381459bde8c4 — Environment-variable access.
repo/scripts/seedUserInfo/index.ts:17 
const env = process.env.NODE_ENV || 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e40ee88c930c1107 — Environment-variable access.
repo/scripts/seedUserInfo/index.ts:39 
  if (!process.env.DATABASE_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #229836e2726d81d0 — Environment-variable access.
repo/scripts/serverLauncher/startServer.js:88 
    process.env.ENABLE_PROXY_DNS === '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #743ae2e5ce5ddd66 — Filesystem access.
repo/scripts/serverLauncher/startServer.js:111 
  await fs.writeFile(PROXYCHAINS_CONF_PATH, configContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3e2a42931737c20f — Environment-variable access.
repo/scripts/serverLauncher/startServer.js:131 
  const KEY_VAULTS_SECRET = process.env.KEY_VAULTS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6e6e70eddb3e0b05 — Environment-variable access.
repo/scripts/serverLauncher/startServer.js:134 
  const port = process.env.PORT || 3210;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8c55e3e9c537d408 — Environment-variable access.
repo/scripts/serverLauncher/startServer.js:168 
  const QSTASH_URL = process.env.QSTASH_URL || 'https://qstash-eu-central-1.upstash.io';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #25de7e1e1b770129 — Environment-variable access.
repo/scripts/serverLauncher/startServer.js:170 
  const QSTASH_TOKEN = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #917dea4147554e35 — Environment-variable access.
repo/scripts/serverLauncher/startServer.js:176 
  const APP_URL = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0acda3f8c40bb40b — Environment-variable access.
repo/scripts/serverLauncher/startServer.js:209 
  const PROXY_URL = process.env.PROXY_URL || ''; // Default empty string to avoid undefined errors

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cec00760527ac5dc — Environment-variable access.
repo/scripts/serverLauncher/startServer.js:226 
  if (process.env.DATABASE_DRIVER) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff2ca27dda74ee87 — Environment-variable access.
repo/scripts/vercelIgnoredBuildStep.js:4 
const branchName = process.env.VERCEL_GIT_COMMIT_REF || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4cd291b38e596da0 — Environment-variable access.
repo/src/app/(backend)/_deprecated/createBizOpenAI/createAzureOpenai.ts:16 
  const OPENAI_PROXY_URL = process.env.OPENAI_PROXY_URL || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #424d661599157304 — Environment-variable access.
repo/src/app/(backend)/_deprecated/createBizOpenAI/createOpenai.ts:9 
  const OPENAI_PROXY_URL = process.env.OPENAI_PROXY_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc83f27ddecb79dc — Environment-variable access.
repo/src/app/(backend)/api/dev/agent-tracing/route.ts:9 
  if (process.env.NODE_ENV !== 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17018beeaa71c848 — Filesystem access.
repo/src/app/(backend)/api/dev/agent-tracing/route.ts:21 
      const content = await fs.readFile(fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #65c6c71b2c3bc752 — Environment-variable access.
repo/src/app/(backend)/api/dev/test-push/route.ts:19 
  if (process.env.NODE_ENV !== 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f5fefe5d70d2a32e — Environment-variable access.
repo/src/app/(backend)/api/webhooks/memory-user-memory/pipelines/extract/chat-topic/cancel/route.ts:37 
  const token = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #12e8169bf3a242df — Environment-variable access.
repo/src/app/(backend)/api/webhooks/memory-user-memory/pipelines/extract/chat-topic/cancel/route.ts:41 
  if (process.env.QSTASH_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #009f816b1df93e81 — Environment-variable access.
repo/src/app/(backend)/api/webhooks/memory-user-memory/pipelines/extract/chat-topic/cancel/route.ts:42 
    (config as Record<string, unknown>).url = process.env.QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #140fe9ab8d800d91 — Environment-variable access.
repo/src/app/(backend)/market/oidc/[[...segments]]/route.ts:7 
const MARKET_BASE_URL = process.env.MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #440d05bb7fc6fb57 — Environment-variable access.
repo/src/app/(backend)/middleware/auth/index.test.ts:234 
      delete process.env.MOCK_DEV_USER_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #caed6d1df2807af1 — Environment-variable access.
repo/src/app/(backend)/middleware/auth/index.ts:73 
    const isMockUser = process.env.ENABLE_MOCK_DEV_USER === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb589d461e8b6cb7 — Environment-variable access.
repo/src/app/(backend)/middleware/auth/index.ts:74 
    if (process.env.NODE_ENV === 'development' && (isDebugApi || isMockUser)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d6870af0dce48136 — Environment-variable access.
repo/src/app/(backend)/middleware/auth/index.ts:75 
      const mockUserId = process.env.MOCK_DEV_USER_ID || 'DEV_USER';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #394a3e5f0da7f75c — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/app/(backend)/webapi/chat/[provider]/route.test.ts:32 
  request = new Request(new URL('https://test.com'), {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #a6cb20d8ce70e2b8 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/app/(backend)/webapi/chat/[provider]/route.test.ts:88 
      request = new Request(new URL('https://test.com'), {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #b94b44018665cfcc — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/app/(backend)/webapi/chat/[provider]/route.test.ts:113 
      request = new Request(new URL('https://test.com'), {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #675cd2bb58df00f7 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/app/(backend)/webapi/models/[provider]/pricing/route.test.ts:45 
  request = new Request(new URL('https://test.com'), {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #94d358366d48f3f0 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/app/(backend)/webapi/models/[provider]/route.test.ts:33 
  request = new Request(new URL('https://test.com'), {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #7a98396eb2f90b88 — Environment-variable access.
repo/src/app/(backend)/webapi/revalidate/route.ts:6 
  if (!process.env.REVALIDATE_SECRET) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6cc6290c076fd88 — Environment-variable access.
repo/src/app/(backend)/webapi/revalidate/route.ts:12 
  if (!authToken || authToken !== process.env.REVALIDATE_SECRET) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #290d050a53d25070 — Environment-variable access.
repo/src/app/[variants]/metadata.ts:11 
const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b09b000d33cac9c7 — Environment-variable access.
repo/src/app/layout.tsx:6 
const inVercel = process.env.VERCEL === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0643fe1fdf5c43f8 — Environment-variable access.
repo/src/app/manifest.ts:5 
  if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f7fedd528dd18300 — Environment-variable access.
repo/src/app/spa-auth/[locale]/[[...path]]/route.ts:17 
const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #796090818857a0a4 — Environment-variable access.
repo/src/app/spa/[variants]/[[...path]]/route.ts:34 
const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb2386cefe44945c — Environment-variable access.
repo/src/components/Analytics/Desktop.tsx:7 
  const projectId = process.env.NEXT_PUBLIC_DESKTOP_PROJECT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4be7e3c3cdc7f2e5 — Environment-variable access.
repo/src/components/Analytics/Desktop.tsx:8 
  const baseUrl = process.env.NEXT_PUBLIC_DESKTOP_UMAMI_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97f3497556d3ede4 — Environment-variable access.
repo/src/components/Loading/BrandTextLoading/index.tsx:20 
  const showDebug = process.env.NODE_ENV === 'development' && debugId;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low pii_flow production #55306109e60e6533 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Same-origin destination — not external exfiltration.
repo/src/features/Auth/SignIn/useSignIn.ts:158 · flow /tmp/closeopen-9mgsdxzw/repo/src/features/Auth/SignIn/useSignIn.ts:154 → /tmp/closeopen-9mgsdxzw/repo/src/features/Auth/SignIn/useSignIn.ts:158 
      const response = await fetch('/api/auth/check-user', {
        body: JSON.stringify({ email: targetEmail }),
        headers: { 'Content-Type': 'application/json' },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
low env_fs production #c459249c6bd78e2d — Environment-variable access.
repo/src/features/DevFeatureFlagPanel/Hydrator.tsx:7 
const isDevEnv = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4aead70134bb3cd4 — Environment-variable access.
repo/src/features/DevFeatureFlagPanel/index.tsx:12 
const isDevEnv = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b40b0bb20ea62d5f — Environment-variable access.
repo/src/instrumentation.ts:3 
  if (process.env.NODE_ENV !== 'production' && process.env.NEXT_RUNTIME === 'nodejs') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee5e1abb78dda427 — Environment-variable access.
repo/src/instrumentation.ts:11 
  const isDev = process.env.NODE_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1eb5caebf015c15 — Environment-variable access.
repo/src/instrumentation.ts:13 
    process.env.NEXT_RUNTIME === 'nodejs' &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b6a9393f978555d — Environment-variable access.
repo/src/instrumentation.ts:14 
    process.env.DATABASE_URL &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90ed1241922e72cc — Environment-variable access.
repo/src/instrumentation.ts:15 
    !process.env.VERCEL_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9929473e7a762cb0 — Environment-variable access.
repo/src/instrumentation.ts:16 
    (!isDev || process.env.ENABLE_BOT_IN_DEV === '1')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #31f82bf1edca5be6 — Environment-variable access.
repo/src/instrumentation.ts:31 
  if (process.env.NODE_ENV !== 'production' && !process.env.ENABLE_TELEMETRY_IN_DEV) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46b97e7a690ba8d7 — Environment-variable access.
repo/src/instrumentation.ts:35 
  const shouldEnable = process.env.ENABLE_TELEMETRY && process.env.NEXT_RUNTIME === 'nodejs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ffacdc20388036a — Environment-variable access.
repo/src/layout/AuthProvider/MarketAuth/MarketAuthProvider.tsx:172 
      const baseUrl = process.env.NEXT_PUBLIC_MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d336092ab9d45e9a — Environment-variable access.
repo/src/libs/better-auth/define-config.test.ts:114 
    delete process.env.HTTP_PROXY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #672d8963e5c9bcec — Environment-variable access.
repo/src/libs/better-auth/define-config.test.ts:115 
    delete process.env.http_proxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d4e8605b26567309 — Environment-variable access.
repo/src/libs/better-auth/define-config.test.ts:116 
    delete process.env.HTTPS_PROXY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce92a20df21ba239 — Environment-variable access.
repo/src/libs/better-auth/define-config.test.ts:117 
    delete process.env.https_proxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6eb043e136b6e21a — Environment-variable access.
repo/src/libs/better-auth/define-config.test.ts:118 
    delete process.env.NO_PROXY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f718db4bb0d21797 — Environment-variable access.
repo/src/libs/better-auth/define-config.test.ts:119 
    delete process.env.no_proxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2d1734d6409b56a — Environment-variable access.
repo/src/libs/better-auth/define-config.ts:53 
if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d39b534542218eb4 — Environment-variable access.
repo/src/libs/better-auth/define-config.ts:54 
  const httpProxy = process.env.HTTP_PROXY || process.env.http_proxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #66aa90e0a84ad70b — Environment-variable access.
repo/src/libs/better-auth/define-config.ts:55 
  const httpsProxy = process.env.HTTPS_PROXY || process.env.https_proxy || httpProxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2478c648db25f360 — Environment-variable access.
repo/src/libs/better-auth/define-config.ts:61 
      noProxy: mergeLocalNoProxy(process.env.NO_PROXY || process.env.no_proxy),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #7548a92e6952a463 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/libs/better-auth/sso/providers/feishu.ts:80 
        const tokenResponse = await fetch(FEISHU_TOKEN_URL, {
          body: JSON.stringify({
            client_id: clientId,
            client_secret: clientSecret,
            code,
            grant_type: 'authorization_code',
            redirect_uri: redirectURI,
          }),
          cache: 'no-store',
          headers: {
            'content-type': 'application/json; charset=utf-8',
          },
          method: 'POST',
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #8b0d82ab29232911 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/libs/better-auth/sso/providers/feishu.ts:120 
        const response = await fetch(FEISHU_USERINFO_URL, {
          cache: 'no-store',
          headers: {
            Authorization: `Bearer ${tokens.accessToken}`,
          },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #0b0f5fa57bab4392 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/libs/better-auth/sso/providers/wechat.ts:47 
        const tokenUrl = new URL(WECHAT_TOKEN_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #ec4d8a82b5f7e24a — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/libs/better-auth/sso/providers/wechat.ts:90 
        const url = new URL(WECHAT_USERINFO_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #fc7490ff82c65912 — Environment-variable access.
repo/src/libs/better-auth/utils/config.ts:53 
    normalizeOrigin(process.env.VERCEL_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75b888a09b014498 — Environment-variable access.
repo/src/libs/better-auth/utils/config.ts:54 
    normalizeOrigin(process.env.VERCEL_BRANCH_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4e3d319cdafebfe9 — Environment-variable access.
repo/src/libs/bootMetrics/finalize.test.ts:104 
    process.env.NEXT_PUBLIC_BOOTSTRAP_METRICS_INGEST_URL = INGEST_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ac0b7fe2b0b60a8 — Environment-variable access.
repo/src/libs/bootMetrics/finalize.test.ts:109 
    delete process.env.NEXT_PUBLIC_BOOTSTRAP_METRICS_INGEST_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a75ce337823affa — Environment-variable access.
repo/src/libs/bootMetrics/finalize.test.ts:113 
    delete process.env.NEXT_PUBLIC_BOOTSTRAP_METRICS_INGEST_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1329f1725661195 — Environment-variable access.
repo/src/libs/bootMetrics/finalize.ts:124 
    const ingestUrl = process.env.NEXT_PUBLIC_BOOTSTRAP_METRICS_INGEST_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7877ed2fbcd750a3 — Environment-variable access.
repo/src/libs/debug-file-logger.ts:20 
const shouldEnable = process.env.DEBUG_LOG_FILE === '1' && process.env.NODE_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f40f285e6c221314 — Filesystem access.
repo/src/libs/document-loaders/loaders/code/__tests__/index.test.ts:26 
    const code = fs.readFileSync(join(__dirname, `./long.txt`), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4420cc149aa80eb2 — Filesystem access.
repo/src/libs/document-loaders/loaders/csv/__tests__/index.test.ts:11 
    const content = fs.readFileSync(join(__dirname, `./demo.csv`), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #66802860d289b465 — Filesystem access.
repo/src/libs/document-loaders/loaders/epub/__tests__/index.test.ts:11 
    const content = fs.readFileSync(join(__dirname, `./demo.epub`));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #807d6e34f6cb18cb — Filesystem access.
repo/src/libs/document-loaders/loaders/latex/__tests__/index.test.ts:11 
    const content = fs.readFileSync(join(__dirname, `./demo.tex`), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #527226965ddb4f8e — Filesystem access.
repo/src/libs/document-loaders/loaders/markdown/__tests__/index.test.ts:9 
    const content = fs.readFileSync(join(__dirname, `./demo.mdx`), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cd379196afc3e84e — Filesystem access.
repo/src/libs/document-loaders/loaders/txt/__tests__/index.test.ts:45 
    const content = fs.readFileSync(join(__dirname, `./pg24022.txt`), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b81d77d840479761 — Environment-variable access.
repo/src/libs/mcp/client.ts:27 
  const val = Number(process.env.MCP_TOOL_TIMEOUT);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6f3f60c291d5c6ba — Environment-variable access.
repo/src/libs/next/config/define-config.ts:20 
  const isProd = process.env.NODE_ENV === 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a7266e77713d463 — Environment-variable access.
repo/src/libs/next/config/define-config.ts:21 
  const buildWithDocker = process.env.DOCKER === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5e938c4981e6a77 — Environment-variable access.
repo/src/libs/next/config/define-config.ts:23 
  const shouldUseCSP = process.env.ENABLED_CSP === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d560c1d0b1208874 — Environment-variable access.
repo/src/libs/next/config/define-config.ts:26 
    process.env.NODE_ENV === 'test' || process.env.TEST === '1' || process.env.E2E === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #82a71857ddfd6bea — Environment-variable access.
repo/src/libs/next/config/define-config.ts:28 
  const isStandaloneMode = buildWithDocker || process.env.NEXT_BUILD_STANDALONE === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4dc5ed4aec148c3f — Environment-variable access.
repo/src/libs/next/config/define-config.ts:59 
  const assetPrefix = process.env.NEXT_PUBLIC_ASSET_PREFIX;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b9d573002582a75 — Environment-variable access.
repo/src/libs/next/proxy/define-config.ts:44 
    secure: process.env.NODE_ENV === 'production',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #629df50edff924b8 — Environment-variable access.
repo/src/libs/next/proxy/define-config.ts:115 
        port: process.env.PORT || '3210',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7f129eb7a0acf43 — Environment-variable access.
repo/src/libs/next/proxy/define-config.ts:121 
      url.port = process.env.PORT || '3210';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e19f5eba6e5e784e — Environment-variable access.
repo/src/libs/qstash/index.ts:10 
  ...(process.env.VERCEL_AUTOMATION_BYPASS_SECRET && {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc0ce3c610289e34 — Environment-variable access.
repo/src/libs/qstash/index.ts:11 
    'x-vercel-protection-bypass': process.env.VERCEL_AUTOMATION_BYPASS_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d20f1239ca5e792c — Environment-variable access.
repo/src/libs/qstash/index.ts:141 
  token: process.env.QSTASH_TOKEN!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d266b7a73089120 — Environment-variable access.
repo/src/libs/qstash/index.ts:150 
  token: process.env.QSTASH_TOKEN!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #00dd0007ab15a727 — Environment-variable access.
repo/src/libs/qstash/index.ts:158 
  const currentSigningKey = process.env.QSTASH_CURRENT_SIGNING_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ddf95987ec5159f — Environment-variable access.
repo/src/libs/qstash/index.ts:159 
  const nextSigningKey = process.env.QSTASH_NEXT_SIGNING_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0baece6defae82e — Environment-variable access.
repo/src/libs/redis/manager.ts:4 
export const isRedisDisabledByEnv = () => !!process.env.DISABLE_REDIS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ec9d1b835854dff4 — Environment-variable access.
repo/src/libs/redis/redis.test.ts:6 
  const url = process.env.REDIS_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7832e5e59b2c754c — Environment-variable access.
repo/src/libs/redis/redis.test.ts:10 
  const database = Number.parseInt(process.env.REDIS_DATABASE ?? '', 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db1702a96a9edd5f — Environment-variable access.
repo/src/libs/redis/redis.test.ts:15 
    password: process.env.REDIS_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1358db470225480f — Environment-variable access.
repo/src/libs/redis/redis.test.ts:16 
    prefix: process.env.REDIS_PREFIX ?? 'lobe-chat-test',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f87927256056f83 — Environment-variable access.
repo/src/libs/redis/redis.test.ts:17 
    tls: process.env.REDIS_TLS === 'true',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97ecfbe19181311d — Environment-variable access.
repo/src/libs/redis/redis.test.ts:19 
    username: process.env.REDIS_USERNAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17d052be94102ca9 — Environment-variable access.
repo/src/libs/spaHtml/index.test.ts:42 
    delete process.env.NEXT_PUBLIC_DESKTOP_PROJECT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f0c420be447a355 — Environment-variable access.
repo/src/libs/spaHtml/index.test.ts:43 
    delete process.env.NEXT_PUBLIC_DESKTOP_UMAMI_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a1a63f3c343580e — Environment-variable access.
repo/src/libs/spaHtml/index.test.ts:47 
    process.env.NEXT_PUBLIC_DESKTOP_PROJECT_ID = 'pid';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6fdcd0cdc8ac0530 — Environment-variable access.
repo/src/libs/spaHtml/index.test.ts:48 
    process.env.NEXT_PUBLIC_DESKTOP_UMAMI_BASE_URL = 'https://umami.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f14867c61539f33 — Environment-variable access.
repo/src/libs/spaHtml/index.ts:8 
  `http://localhost:${Number(process.env.VITE_DEV_PORT) || 9876}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8148320800fc384e — Environment-variable access.
repo/src/libs/spaHtml/index.ts:130 
    process.env.NEXT_PUBLIC_DESKTOP_PROJECT_ID &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8a1353d6e0fe3ce — Environment-variable access.
repo/src/libs/spaHtml/index.ts:131 
    process.env.NEXT_PUBLIC_DESKTOP_UMAMI_BASE_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e35a51f873dfe2ae — Environment-variable access.
repo/src/libs/spaHtml/index.ts:134 
      baseUrl: process.env.NEXT_PUBLIC_DESKTOP_UMAMI_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa18f5aac6b11cfe — Environment-variable access.
repo/src/libs/spaHtml/index.ts:135 
      projectId: process.env.NEXT_PUBLIC_DESKTOP_PROJECT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #d878ebf97fe91515 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/routes/(main)/agent/features/Conversation/WorkingSidebar/Browser/utils.ts:19 
    const searchUrl = new URL('https://www.bing.com/search');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #afd1ac945db7ec4f — Filesystem access.
repo/src/services/electron/desktopExportService.tsx:32 
    await localFileService.writeFile({
      content,
      path: result.filePath,
    });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2d261123d4b3462 — Filesystem access.
repo/src/services/electron/localFileService.ts:128 
    return ensureElectronIpc().localSystem.readFile(params);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #543054b07bd1d61b — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/services/global.ts:20 
    const res = await fetch(VERSION_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #f7753eb62360b9cd — Environment-variable access.
repo/src/services/marketApi.ts:202 
    const marketBaseUrl = process.env.NEXT_PUBLIC_MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5359219e0aeea05 — Filesystem access.
repo/src/services/projectFile.ts:164 
      : localFileService.writeFile({ content, path });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #949f5bffb5407700 — Filesystem access.
repo/src/spa/router/desktopRouter.sync.test.tsx:80 
    readFile(path.join(process.cwd(), 'src/spa/router/desktopRouter.config.tsx'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7e6688e8e5f2c6a — Filesystem access.
repo/src/spa/router/desktopRouter.sync.test.tsx:81 
    readFile(path.join(process.cwd(), 'src/spa/router/desktopRouter.config.desktop.tsx'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #22f8128357c725b2 — Filesystem access.
repo/src/spa/router/mobileRouter.test.tsx:8 
    const source = await readFile(
      path.join(process.cwd(), 'src/spa/router/mobileRouter.config.tsx'),
      'utf8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a95050e318ce8993 — Filesystem access.
repo/src/store/chat/slices/agentRun/actions/__tests__/heterogeneousAgentExecutor.test.ts:2372 
      const raw = fs.readFileSync(tracePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b66777dfa4b2c3e7 — Filesystem access.
repo/src/store/chat/slices/agentRun/actions/__tests__/heterogeneousAgentExecutor.test.ts:3114 
        traceData = JSON.parse(fs.readFileSync(tracePath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #65f462e42052fa4c — Environment-variable access.
repo/src/store/chat/slices/agentRun/actions/lifecycle/buildRunLifecycle.test.ts:304 
    const previous = process.env.NEXT_PUBLIC_DEV_DISABLE_AUTO_TOPIC;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36acb012f3210746 — Environment-variable access.
repo/src/store/chat/slices/agentRun/actions/lifecycle/buildRunLifecycle.test.ts:305 
    process.env.NEXT_PUBLIC_DEV_DISABLE_AUTO_TOPIC = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c6af108e97da4ab2 — Environment-variable access.
repo/src/store/chat/slices/agentRun/actions/lifecycle/buildRunLifecycle.test.ts:328 
        delete process.env.NEXT_PUBLIC_DEV_DISABLE_AUTO_TOPIC;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b542492875331e8 — Environment-variable access.
repo/src/store/chat/slices/agentRun/actions/lifecycle/buildRunLifecycle.test.ts:330 
        process.env.NEXT_PUBLIC_DEV_DISABLE_AUTO_TOPIC = previous;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ae532f75147dbca — Environment-variable access.
repo/src/store/chat/slices/agentRun/actions/lifecycle/buildRunLifecycle.ts:196 
        __DEV__ && process.env.NEXT_PUBLIC_DEV_DISABLE_AUTO_TOPIC === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4cca11ff4186b68a — Environment-variable access.
repo/src/store/chat/slices/message/action.test.ts:80 
  process.env.NEXT_PUBLIC_BASE_PATH = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc6b71c588ad2fa0 — Environment-variable access.
repo/src/store/serverConfig/slices/featureFlagOverride/action.ts:11 
const isDevEnv = () => process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6151ab4f80a11c23 — Environment-variable access.
repo/src/store/serverConfig/slices/featureFlagOverride/storage.ts:7 
const isDevEnv = () => process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ab898ed3b2f01be — Environment-variable access.
repo/vite.config.ts:20 
const isMobile = process.env.MOBILE === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #068c80744061bb0a — Environment-variable access.
repo/vite.config.ts:21 
const isAuth = process.env.AUTH === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6e90df61f60b9f36 — Environment-variable access.
repo/vite.config.ts:22 
const mode = process.env.NODE_ENV === 'production' ? 'production' : 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dec95d7e7801e8a7 — Environment-variable access.
repo/vite.config.ts:26 
const isDev = process.env.NODE_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d3d4ebf09ddcefd1 — Environment-variable access.
repo/vite.config.ts:28 
const enableViteDevTools = process.env.LOBE_VITE_DEVTOOLS === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c31a7989982448a5 — Environment-variable access.
repo/vite.config.ts:31 
  const pathValue = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b05e64dfdcefe7e2 — Environment-variable access.
repo/vite.config.ts:35 
    const pathExt = (process.env.PATHEXT || '.COM;.EXE;.BAT;.CMD')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0eeb9e90b64089d — Environment-variable access.
repo/vite.config.ts:105 
  base: isDev ? '/' : process.env.VITE_CDN_BASE || (isAuth ? '/_spa-auth/' : '/_spa/'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #608a6bbae758235f — Environment-variable access.
repo/vite.config.ts:304 
      ? Number(process.env.MOBILE_SPA_PORT) || 3012

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a7e555bcc0cc24b6 — Environment-variable access.
repo/vite.config.ts:306 
        ? Number(process.env.AUTH_SPA_PORT) || 3013

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1200543536d47037 — Environment-variable access.
repo/vite.config.ts:307 
        : Number(process.env.SPA_PORT) || 9876,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6fcf0d745a87a9b — Environment-variable access.
repo/vite.config.ts:313 
      '/api': `http://localhost:${process.env.PORT || 3010}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #65b512a7d30bd88a — Environment-variable access.
repo/vite.config.ts:314 
      '/oidc': `http://localhost:${process.env.PORT || 3010}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61922a6d34dc6c6d — Environment-variable access.
repo/vite.config.ts:315 
      '/trpc': `http://localhost:${process.env.PORT || 3010}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b39ea0967528b516 — Environment-variable access.
repo/vite.config.ts:316 
      '/webapi': `http://localhost:${process.env.PORT || 3010}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/web-crawler

npm first-party
high pii_flow production #60938e80f7cc8c34 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/browserless.ts:42 · flow /tmp/closeopen-9mgsdxzw/repo/packages/web-crawler/src/crawImpl/browserless.ts:10 → /tmp/closeopen-9mgsdxzw/repo/packages/web-crawler/src/crawImpl/browserless.ts:42 
        fetch(
          qs.stringifyUrl({
            query: {
              blockAds: BROWSERLESS_BLOCK_ADS,
              launch: JSON.stringify({ stealth: BROWSERLESS_STEALTH_MODE }),
              token: BROWSERLESS_TOKEN,
            },
            url: urlJoin(BASE_URL, '/content'),
          }),
          {
            body: JSON.stringify(input),
            headers: {
              'Content-Type': 'application/json',
            },
            method: 'POST',
            signal,
          },
        ),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #3569c3752a2078da — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/exa.ts:32 · flow /tmp/closeopen-9mgsdxzw/repo/packages/web-crawler/src/crawImpl/exa.ts:25 → /tmp/closeopen-9mgsdxzw/repo/packages/web-crawler/src/crawImpl/exa.ts:32 
        fetch('https://api.exa.ai/contents', {
          body: JSON.stringify({
            livecrawl: 'fallback', // always, fallback
            text: true,
            urls: [url],
          }),
          headers: {
            'Content-Type': 'application/json',
            'x-api-key': !apiKey ? '' : apiKey,
          },
          method: 'POST',
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #13344c66eb3c065a — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/firecrawl.ts:62 · flow /tmp/closeopen-9mgsdxzw/repo/packages/web-crawler/src/crawImpl/firecrawl.ts:54 → /tmp/closeopen-9mgsdxzw/repo/packages/web-crawler/src/crawImpl/firecrawl.ts:62 
        fetch(`${baseUrl}/scrape`, {
          body: JSON.stringify({
            formats: ['markdown'], // ["markdown", "html"]
            url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #0cb113cbc9cfc09e — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/jina.ts:17 · flow /tmp/closeopen-9mgsdxzw/repo/packages/web-crawler/src/crawImpl/jina.ts:11 → /tmp/closeopen-9mgsdxzw/repo/packages/web-crawler/src/crawImpl/jina.ts:17 
        fetch(`${getJinaReaderBaseUrl()}/${url}`, {
          headers: {
            'Accept': 'application/json',
            'Authorization': token ? `Bearer ${token}` : '',
            'x-send-from': 'LobeChat Community',
          },
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #f2a162469ae82cd3 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/search1api.ts:26 · flow /tmp/closeopen-9mgsdxzw/repo/packages/web-crawler/src/crawImpl/search1api.ts:19 → /tmp/closeopen-9mgsdxzw/repo/packages/web-crawler/src/crawImpl/search1api.ts:26 
        fetch('https://api.search1api.com/crawl', {
          body: JSON.stringify({
            url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #5661c88286d49135 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/tavily.ts:33 · flow /tmp/closeopen-9mgsdxzw/repo/packages/web-crawler/src/crawImpl/tavily.ts:26 → /tmp/closeopen-9mgsdxzw/repo/packages/web-crawler/src/crawImpl/tavily.ts:33 
        fetch('https://api.tavily.com/extract', {
          body: JSON.stringify({
            extract_depth: process.env.TAVILY_EXTRACT_DEPTH || 'basic', // basic or advanced
            include_images: false,
            urls: url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 79 low-confidence finding(s)
low env_fs test-only #28f9fc9fb6376cb3 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:15 
    delete process.env.BROWSERLESS_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #13a97e475a258c65 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:16 
    delete process.env.BROWSERLESS_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #63b2f4a89683fd3d — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:26 
    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #86eb913031abc87c — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:36 
    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fc1975f8434dd825 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:49 
    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #718703ffe374816b — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:62 
    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ccd8c560b8911b2a — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:96 
    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f7bbf83629fc3e78 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:137 
    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bf01d1e0e38e0cd9 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:16 
    delete process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8c0cae6eab1f4e55 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:20 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e5d55cc8dbc611ab — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:77 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c8508b781991a16c — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:101 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #870b08094c39a430 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:122 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #17f641473a1290c7 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:139 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #30692e61d0ab66f3 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:156 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e8d9b72134c84163 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:167 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c3745beabbd45a68 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:178 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f33cc1f3d6c4c630 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:191 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #22f1db38039d4ecb — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:210 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2c88079823fa6ed9 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:231 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bf10c1622dc775cf — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:16 
    delete process.env.FIRECRAWL_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fbc90a1f1af2fbed — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:17 
    delete process.env.FIRECRAWL_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #787ad8edf3ea41dd — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:21 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e0df6c0076ca9cdf — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:86 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f31f498cba7b8432 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:113 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9a376b821e691270 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:140 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ffc8c904ae137666 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:157 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #79fdbec72a14e486 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:174 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a3d36f079af5e861 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:185 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #802ebbe6c2612732 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:198 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a4427bfd7b3144a6 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:211 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #11b8326870564777 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:230 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b921aef3ae7a5a3e — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:22 
    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5685205bd0ee7ba9 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:23 
    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1b2f26898d363441 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:24 
    delete process.env.JINA_USE_CN_DOMAINS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6dac7f76c9445f4e — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:28 
    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1d7d648d9646fe42 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:29 
    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1533b0e220e84855 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:30 
    delete process.env.JINA_USE_CN_DOMAINS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #01a6ac1b3074557f — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:80 
    process.env.JINA_READER_API_KEY = 'env-reader-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #40143621991ddcfd — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:105 
    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7c75bd545e335a00 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:109 
    process.env.JINA_API_KEY = 'env-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b389c1a7bac0a6c8 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:134 
    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9069b38349b407de — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:163 
    process.env.JINA_USE_CN_DOMAINS = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c574028571029306 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/search1api.test.ts:19 
    process.env.SEARCH1API_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #03017bd2db4ec83d — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:16 
    delete process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #59926fe77855ebbd — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:17 
    delete process.env.TAVILY_EXTRACT_DEPTH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #382c820ba354de60 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:21 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #368cb6b108df58f1 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:55 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #04cb3dd69d45324d — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:56 
    process.env.TAVILY_EXTRACT_DEPTH = 'advanced';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d370cea11f71f8ad — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:98 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a4ababcc2e7ae2bc — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:123 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1b7117b55dc0f70b — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:145 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #de2087990b3da88a — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:168 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f78129d45275ea7c — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:185 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a5edc9e1d02e8abb — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:202 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6972313676960fa8 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:213 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4a9e495492c315ef — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:226 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7f995d2a6ad985b6 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:239 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #64fac12f5506032d — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:258 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #90c3637c39e5a94f — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:280 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #76c394251c887aa0 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:302 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #96952e874f05480c — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/browserless.ts:10 
const BASE_URL = process.env.BROWSERLESS_URL ?? 'https://chrome.browserless.io';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #31dc2f178b3c9446 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/browserless.ts:14 
const BROWSERLESS_TOKEN = process.env.BROWSERLESS_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #375aa06f53ccb891 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/browserless.ts:16 
const BROWSERLESS_BLOCK_ADS = process.env.BROWSERLESS_BLOCK_ADS === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf62afe923369010 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/browserless.ts:17 
const BROWSERLESS_STEALTH_MODE = process.env.BROWSERLESS_STEALTH_MODE === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2108e6de31ac8ff8 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/browserless.ts:27 
  if (!process.env.BROWSERLESS_URL && !process.env.BROWSERLESS_TOKEN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4da2daa4433f2cc5 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/exa.ts:25 
  const apiKey = process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #211e21354a253ddb — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/web-crawler/src/crawImpl/exa.ts:32 
        fetch('https://api.exa.ai/contents', {
          body: JSON.stringify({
            livecrawl: 'fallback', // always, fallback
            text: true,
            urls: [url],
          }),
          headers: {
            'Content-Type': 'application/json',
            'x-api-key': !apiKey ? '' : apiKey,
          },
          method: 'POST',
          signal,
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #3fa2065ac3deee0b — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/firecrawl.ts:54 
  const apiKey = process.env.FIRECRAWL_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5e82c2d7f3df6fc5 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/firecrawl.ts:55 
  const baseUrl = process.env.FIRECRAWL_URL || 'https://api.firecrawl.dev/v2';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a51ae5070153973f — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/jina.ts:11 
  const token = params.apiKey ?? process.env.JINA_READER_API_KEY ?? process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #73397ecbd1c32457 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/search1api.ts:19 
  const apiKey = process.env.SEARCH1API_CRAWL_API_KEY || process.env.SEARCH1API_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #87717956726a4413 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/web-crawler/src/crawImpl/search1api.ts:26 
        fetch('https://api.search1api.com/crawl', {
          body: JSON.stringify({
            url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #8139a1d3455a9a8f — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/tavily.ts:26 
  const apiKey = process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #f1284e61b6d21173 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/web-crawler/src/crawImpl/tavily.ts:33 
        fetch('https://api.tavily.com/extract', {
          body: JSON.stringify({
            extract_depth: process.env.TAVILY_EXTRACT_DEPTH || 'basic', // basic or advanced
            include_images: false,
            urls: url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #2e25a5512895b05e — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/tavily.ts:35 
            extract_depth: process.env.TAVILY_EXTRACT_DEPTH || 'basic', // basic or advanced

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fcb5f911ea8eb851 — Filesystem access.
repo/packages/web-crawler/src/utils/htmlToMarkdown.test.ts:29 
      const html = readFileSync(path.join(__dirname, `./html/${item.file}`), { encoding: 'utf8' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a4b524d0ab1a08d6 — Environment-variable access.
repo/packages/web-crawler/src/utils/withTimeout.ts:3 
export const DEFAULT_TIMEOUT = process.env.CRAWLER_TIMEOUT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a891bd2a06164e35 — Environment-variable access.
repo/packages/web-crawler/src/utils/withTimeout.ts:4 
  ? Number(process.env.CRAWLER_TIMEOUT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/heterogeneous-agents

npm first-party
medium telemetry production #cb05b02a93c4cba3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/agentStreamPipeline.ts:137 
      const payload = this.codexTracker ? await this.codexTracker.track(raw as any) : raw;

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #5406104b95f9d6e7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:28 
    await tracker.track({
      item: {
        changes: [
          { kind: 'update', path: updatePath },
          { kind: 'add', path: addPath },
        ],
        id: 'item_1',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #bedf9e99ee08bbf9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:43 
    const enriched = await tracker.track({
      item: {
        changes: [
          { kind: 'update', path: updatePath },
          { kind: 'add', path: addPath },
        ],
        id: 'item_1',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #be93c88f20923e22 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:88 
    await tracker.track({
      item: {
        changes: [],
        id: 'item_missing_snapshot',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #b83fc5ccd719017f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:99 
    const enriched = await tracker.track({
      item: {
        changes: [{ kind: 'update', path: updatePath }],
        id: 'item_missing_snapshot',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #45be00fcad2aca0b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:128 
    await tracker.track({
      item: {
        changes: [{ kind: 'rename', path: afterPath }],
        id: 'item_rename',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #89b5f5441ed09c47 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:139 
    const enriched = await tracker.track({
      item: {
        changes: [{ kind: 'rename', path: afterPath }],
        id: 'item_rename',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #488541f2b58ad752 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:168 
    await tracker.track({
      item: {
        changes: [{ kind: 'update', path: relativePath }],
        id: 'item_relative',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #05799b49e8dfb262 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:179 
    const enriched = await tracker.track({
      item: {
        changes: [{ kind: 'update', path: relativePath }],
        id: 'item_relative',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #036dad2180ca1624 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:209 
    await tracker.track({
      item: {
        changes: [{ kind: 'add', path: addPath }],
        id: 'item_plus_prefix',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #94630bf655d604ef — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:220 
    const enriched = await tracker.track({
      item: {
        changes: [{ kind: 'add', path: addPath }],
        id: 'item_plus_prefix',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 78 low-confidence finding(s)
low env_fs production #dcc0759ab78ebc83 — Filesystem access.
repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:8 
  const raw = await readFile(new URL(`./__fixtures__/codex/${name}`, import.meta.url), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc7fe4e50ee7fb01 — Environment-variable access.
repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:181 
    const previousTimezone = process.env.TZ;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb0d2705bc73be09 — Environment-variable access.
repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:182 
    process.env.TZ = 'Asia/Shanghai';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b29228d5c56842e — Environment-variable access.
repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:208 
        delete process.env.TZ;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0946442c159e2f68 — Environment-variable access.
repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:210 
        process.env.TZ = previousTimezone;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f92b25a581dd5b89 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/claudeAgentSdkSession.ts:16 
  const raw = process.env[name];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #223cb5a1992b3966 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/cliSpawn.ts:187 
    const source = await readFile(shimPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93fc634ccf804ec6 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:24 
    await writeFile(updatePath, 'hello\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ebb3c8ea797cc30a — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:40 
    await writeFile(updatePath, 'hello\nappended line\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3b3ef597bab95da — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:41 
    await writeFile(addPath, 'line one\nline two\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9559e2e8759f17ac — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:84 
    await writeFile(updatePath, 'line one\nline two\nline three\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2494b55791089fe1 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:97 
    await writeFile(updatePath, 'line one\nline two updated\nline three\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d89714645fef7c1 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:124 
    await writeFile(beforePath, 'content\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c83ae699a192035b — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:164 
    await writeFile(absolutePath, 'before\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae7a412c4901850c — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:177 
    await writeFile(absolutePath, 'before\nafter\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c1705ab20da4df0b — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:218 
    await writeFile(addPath, '++leading content\n+++header lookalike\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #02fd62e53488f209 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.ts:64 
      content: await readFile(filePath, 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3fce2827de8389f — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:38 
    await writeFile(
      path.join(codexHome, 'config.toml'),
      [
        'model = "gpt-5.4"',
        '',
        '[profiles.fast]',
        'model = "gpt-5.5-mini"',
        '',
        '[profiles."quoted.name"]',
        'model = "gpt-5.5"',
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba3a31cecd2217d7 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:76 
    await writeFile(path.join(codexHome, 'config.toml'), 'model = "gpt-5.4"\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87090029c5bd90d1 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:94 
    await writeFile(
      path.join(sessionDir, 'rollout-2026-06-11T01-31-27-thread-123.jsonl'),
      [
        JSON.stringify({ payload: { model_provider: 'openai' }, type: 'session_meta' }),
        JSON.stringify({ payload: { model_context_window: 258_400 }, type: 'turn_context' }),
        JSON.stringify({ payload: { model: 'gpt-5.5' }, type: 'event_msg' }),
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b96d6ceadd1f5f78 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:117 
    await writeFile(
      path.join(sessionDir, 'rollout-2026-06-11T01-31-27-thread-usage.jsonl'),
      [
        JSON.stringify({
          payload: {
            info: {
              total_token_usage: {
                cached_input_tokens: 5,
                input_tokens: 25,
                output_tokens: 9,
                reasoning_output_tokens: 4,
              },
            },
            type: 'token_count',
            usage: { input_tokens: 100, output_tokens: 100 },
          },
          type: 'event_msg',
          usage: { input_tokens: 200, output_tokens: 200 },
        }),
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #18b06e5989a454d0 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:158 
    await writeFile(
      path.join(sessionDir, 'rollout-2026-06-11T01-31-27-thread-legacy-usage.jsonl'),
      [
        JSON.stringify({
          payload: { usage: { input_tokens: 10, output_tokens: 2 } },
          type: 'event_msg',
        }),
        JSON.stringify({
          type: 'turn.completed',
          usage: { cached_input_tokens: 5, input_tokens: 25, output_tokens: 9 },
        }),
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b76e13f98fa47711 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.ts:189 
    const config = await readFile(path.join(getCodexHome(env, homeDir), 'config.toml'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d14e8a652156d50 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.ts:275 
  const content = await readFile(sourceFile, 'utf8').catch(() => undefined);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5010485bfc76f573 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/buildAgentInput.test.ts:67 
      await writeFile(filePath, PNG_BYTES);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e767cb93fa05480a — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/buildAgentInput.test.ts:228 
      const written = await readFile(imagePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28b998d93bce0155 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/buildAgentInput.test.ts:234 
      await writeFile(filePath, PNG_BYTES);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #23c4c2030a207d1c — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:137 
      const meta = JSON.parse(await readFile(metaPath, 'utf8')) as { mediaType?: string };

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e3f702a4536fead9 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:138 
      const buffer = await readFile(dataPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a0d8ccbdb9b4f11 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:158 
    await writeFile(path.join(cacheDir, key), buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ef60b425d0f53bd — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:159 
    await writeFile(
      path.join(cacheDir, `${key}.meta`),
      JSON.stringify({ id: source.id, mediaType }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a39b167de5175197 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:169 
  const buffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d99d721163261e1 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:238 
    await writeFile(filePath, image.buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f46d2b604e7c1916 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:94 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #895a8cc11d8be15c — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:95 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8637ab093f18f7e9 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:97 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8c57e293fa475d00 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:98 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c9a772f9b04612b8 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:117 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c4cbb346070b0637 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:118 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f1660aae4020a83 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:119 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b1df90d0cd1d7a71 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:124 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91aee0de4fe72dfa — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:125 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88b7e0e3c08ac76c — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:126 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8979c2f1e03aee6e — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:127 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0874e015b4ee63a — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:144 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ada878ab328e0861 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:145 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5bcaaa92c10046de — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:146 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5fee9900d229baed — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:151 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d2a1ebb5fa53cc9 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:152 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75e03d88e09747aa — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:153 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fca4e1c1f6f715f0 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:154 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #68ca5b9930566ba0 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:167 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d5e4addd3c44cfe — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:168 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26625f28d05ef658 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:169 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b10a48c076d4baa — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:174 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #49ee125ab3a3ed71 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:175 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e775edabf302e43e — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:176 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b91c08f4e17bec0 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:177 
      process.env.SHELL = '/bin/zsh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce2629aa4b11595e — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:194 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f51d75378f53eec — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:195 
        process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c3efb8c2e2d32b63 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:275 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52aa884e0609cd50 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:276 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #45b29a22f3741446 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:277 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2bdc10acc4c2c95b — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:278 
      process.env.SHELL = '/bin/zsh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f66943dfa382a71 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:292 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d9bbcdbbd72a369 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:293 
        process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d655006780feaa72 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:298 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #559b8436e5310f73 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:299 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b3da520d3ee33ed — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:302 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5e605a8dd1d7bf5c — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:303 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b9d02974338a0771 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:318 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ae78272d96cd481 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:319 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #57fe1fb239657173 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:320 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa7fdd0022c7e189 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.ts:79 
  const shell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad1832810c9f7e51 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.ts:153 
    const lookupPath = mergePathValues(shellPath, process.env.PATH);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3574dab63cb7b6e3 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.ts:155 
    if (lookupPath && lookupPath !== process.env.PATH) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fce6c3097bd82f1b — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/spawnAgent.test.ts:289 
    const realCodexFixture = await readFile(
      new URL('../adapters/__fixtures__/codex/collab_tool_call.spawn_wait.jsonl', import.meta.url),
      'utf8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce3841667ecd07dd — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/spawnAgent.test.ts:297 
    await writeFile(
      path.join(sessionDir, `rollout-2026-06-11T01-31-27-${threadId}.jsonl`),
      JSON.stringify({
        type: 'turn.completed',
        usage: { cached_input_tokens: 42_000, input_tokens: 51_000, output_tokens: 300 },
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): apps/desktop/src/main

npm first-party
expand_more 170 low-confidence finding(s)
low egress production #97c286f6ae76060a — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/desktop/src/main/controllers/BrowserSidebarCtr.ts:54 
    const searchUrl = new URL('https://www.bing.com/search');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #4b5b3410809b82fd — Filesystem access.
repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:373 
        readLocalFile: (p) => local.readFile(p),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe1d34efa496d700 — Filesystem access.
repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:463 
        return runtime.readFile({
          endLine: p.loc?.[1],
          path: p.path,
          startLine: p.loc?.[0],
        });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b434196f3f28086 — Filesystem access.
repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:493 
        return runtime.writeFile(args as WriteLocalFileParams);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8543b70471a34d0a — Filesystem access.
repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:737 
      const content = fs.readFileSync(soulPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #184b104ef3b66dfd — Filesystem access.
repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:807 
      const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1ae9873cb1f9ff5f — Environment-variable access.
repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:853 
      const openclawAgent = process.env['OPENCLAW_AGENT_ID'] ?? 'main';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4bc29e29f329101c — Environment-variable access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:638 
      String(process.env.LOBE_CLAUDE_CODE_SDK ?? '').toLowerCase(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3fee63a63987b91b — Environment-variable access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:656 
    if (process.env.NODE_ENV === 'test') return false;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c6de3642eeb8733a — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:757 
      await writeFile(path.join(rootDir, '.last-live-trace'), `${dir}\n`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d0657ba6aa5c636 — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:758 
      await writeFile(path.join(dir, 'stdout.jsonl'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4e40f418a01f40e8 — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:759 
      await writeFile(path.join(dir, 'stderr.log'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b30e73b14b85c5f6 — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:761 
        await writeFile(path.join(dir, 'stdin.txt'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #63d140b1952c9b8c — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:763 
      await writeFile(
        path.join(dir, 'meta.json'),
        `${JSON.stringify(
          {
            agentSessionId: session.agentSessionId,
            agentType: session.agentType,
            args: cliArgs,
            attachments: imageList.map((image) => this.getAttachmentTraceSummary(image)),
            command: session.command,
            createdAt: createdAt.toISOString(),
            cwd,
            envKeys: session.env ? Object.keys(session.env).sort() : [],
            model: session.model,
            modelSource: session.modelSource,
            resumeSessionId: session.resumeSessionId,
            sessionId: session.sessionId,
            stdinBytes: stdinPayload === undefined ? 0 : Buffer.byteLength(stdinPayload),
            stdinFile: stdinPayload === undefined ? undefined : 'stdin.txt',
            stderrFile: 'stderr.log',
            stdoutFile: 'stdout.jsonl',
            verifiedModel: session.verifiedModel,
            verifiedModelContextWindow: session.verifiedModelContextWindow,
            verifiedModelProvider: session.verifiedModelProvider,
            verifiedModelSessionId: session.verifiedModelSessionId,
            verifiedModelSourceFile: session.verifiedModelSourceFile,
          },
          null,
          2,
        )}\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b1d026b25aaab40 — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:834 
    return this.queueCliTraceWrite(trace, () => writeFile(filePath, data));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08ac16435556d6d9 — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:922 
    await writeFile(tmpConfigPath, JSON.stringify(config), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc5750f217f51756 — Filesystem access.
repo/apps/desktop/src/main/controllers/LocalFileCtr.ts:353 
    const data = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #17a94bee2a213856 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:191 
    originalClaudeSdkLabEnv = process.env.LOBE_CLAUDE_CODE_SDK;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1e48e8847d90fb83 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:197 
    delete process.env.LOBE_CLAUDE_CODE_SDK;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #246bd6e202fd0b54 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:201 
    if (originalClaudeSdkLabEnv === undefined) delete process.env.LOBE_CLAUDE_CODE_SDK;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5d80ef6bb23cdc46 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:202 
    else process.env.LOBE_CLAUDE_CODE_SDK = originalClaudeSdkLabEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #be137e954727018e — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:264 
      await writeFile(outOfRootDataPath, 'SECRET');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #215e80867eefa7a7 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:265 
      await writeFile(
        outOfRootMetaPath,
        JSON.stringify({ id: traversalId, mimeType: 'text/plain' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f2dbbe59fc54dc43 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:284 
      await expect(readFile(outOfRootDataPath, 'utf8')).resolves.toBe('SECRET');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7cd66493e1f26658 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:454 
      process.env.LOBE_CLAUDE_CODE_SDK = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #08c65193868bc2cb — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:558 
        ANTHROPIC_API_KEY: process.env.ANTHROPIC_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #583641ce1bf89604 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:559 
        ANTHROPIC_AUTH_TOKEN: process.env.ANTHROPIC_AUTH_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #36ca92d757d883fd — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:560 
        ANTHROPIC_BASE_URL: process.env.ANTHROPIC_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f9513b073ee86a69 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:562 
      process.env.ANTHROPIC_API_KEY = 'sk-host-should-not-leak';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #33f7ae7d4bd3fd95 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:563 
      process.env.ANTHROPIC_AUTH_TOKEN = 'host-token-should-not-leak';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8d988f4cd62745ca — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:564 
      process.env.ANTHROPIC_BASE_URL = 'https://host.example/should-not-leak';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5dc31230c97c6074 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:573 
        expect(options.env.PATH).toBe(process.env.PATH);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a3b84ec58af3f732 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:576 
          if (value === undefined) delete process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f5840d7a9def56aa — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:577 
          else process.env[key] = value;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #15e25b64b197983c — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:583 
      const originalKey = process.env.ANTHROPIC_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b3804b3ce45377e5 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:584 
      process.env.ANTHROPIC_API_KEY = 'sk-host-should-not-leak';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #03ca1f8fcd4aeff4 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:594 
        if (originalKey === undefined) delete process.env.ANTHROPIC_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #021437a6e79273ef — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:595 
        else process.env.ANTHROPIC_API_KEY = originalKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #761cd1562893f4e8 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:872 
        Promise.all(imagePaths.map((filePath) => readFile(filePath, 'utf8'))),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1c329419177037a9 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:887 
      await expect(readFile(imagePaths[0], 'utf8')).resolves.toBe('PNG_TEST');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #91be7d87e43223bc — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:907 
      await expect(readFile(imagePaths[0])).resolves.toEqual(pngBytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4d4578e9c320ee63 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:979 
      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a84302c67f992c5d — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:980 
      process.env.NODE_ENV = 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #951b4919abdca1f9 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:999 
        await expect(readFile(path.join(traceRoot, '.last-live-trace'), 'utf8')).resolves.toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5c629f289d00eab1 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1002 
        await expect(readFile(path.join(traceDir, 'stdin.txt'), 'utf8')).resolves.toBe(prompt);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a5d6ac92ab28eced — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1003 
        await expect(readFile(path.join(traceDir, 'stdout.jsonl'), 'utf8')).resolves.toBe(rawLine);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e60452ee442e93a9 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1004 
        await expect(readFile(path.join(traceDir, 'stderr.log'), 'utf8')).resolves.toBe('');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #000f22cdda4556b2 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1005 
        await expect(readFile(path.join(traceDir, 'exit.json'), 'utf8')).resolves.toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7616b55692c03758 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1009 
        const meta = JSON.parse(await readFile(path.join(traceDir, 'meta.json'), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #348221c8dde295d7 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1022 
        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cbb4809a43750979 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1027 
      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #605e0e1ed7d3a854 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1029 
      process.env.NODE_ENV = 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #61191861d613f565 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1048 
        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2016f489b0e4852d — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1053 
      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #69c4483335dd7861 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1056 
      process.env.NODE_ENV = 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #43a1a9ece325a39c — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1076 
        await expect(readFile(path.join(traceDir, 'stdout.jsonl'), 'utf8')).resolves.toBe(rawLine);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #933be6a34208a2df — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1081 
        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5fb1fc5d6242be08 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1087 
      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #18b7e430eaf7046e — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1088 
      process.env.NODE_ENV = 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #048ed9293ed33424 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1100 
        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #07dd0d9daa79f4f4 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1106 
      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #24dcd10472ce92c8 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1107 
      process.env.NODE_ENV = 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b008abcb8a3ad173 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1116 
        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #72feb0a8b439cbbe — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1487 
      await writeFile(tmpConfigPath, '{"mcpServers":{}}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0ceabaf0bb4ca26f — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:66 
      await writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f79777edca875514 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:68 
      const result = await localFileCtr.readFile({ path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #42a9c23bdae64780 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:86 
      await writeFile(filePath, 'line1\nline2\nline3\nline4\nline5');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1d30d86a7639659d — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:88 
      const result = await localFileCtr.readFile({ loc: [1, 3], path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1acd4f7f3264570b — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:107 
      await writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #06c0142e50627e59 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:109 
      const result = await localFileCtr.readFile({ fullContent: true, path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #50a308bac18b6b9b — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:126 
      const result = await localFileCtr.readFile({
        path: path.join(tmpDir, 'does-not-exist.txt'),
      });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #38e793ae84d7b936 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:154 
      await writeFile(filePath, pngBytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #aaa57b26eac5e53e — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:156 
      const result = await localFileCtr.readFile({ path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a5ff2b3b968895df — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:173 
      await writeFile(filePath, pngBytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0d14d966aa982f53 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:175 
      const result = await localFileCtr.readFile({ cwd: tmpDir, path: 'assets/nested.jpg' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #69d4aa1ea6d5e64e — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:187 
      await writeFile(filePath, pngBytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4c670672b442dfdd — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:189 
      const result = await localFileCtr.readFile({ path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2bf647f5df59ee31 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:200 
      await writeFile(filePath, pngBytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #17ad2eac288aecbf — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:202 
      const result = await localFileCtr.readFile({ path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9a582c376e6e8a0e — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:210 
      const result = await localFileCtr.readFile({ path: path.join(tmpDir, 'missing.png') });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #856932d123076346 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:220 
      await writeFile(filePath, Buffer.alloc(10 * 1024 * 1024 + 1));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6a0da8c5aeb61a50 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:222 
      const result = await localFileCtr.readFile({ path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1d70005208334e2d — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:233 
      await writeFile(filePath, svg);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0a1dccbdc576054a — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:235 
      const result = await localFileCtr.readFile({ path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8cecd039b59baa36 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:246 
      await writeFile(file1, 'content a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7e7547f090390cad — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:247 
      await writeFile(file2, 'content b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f8f512cb8cd654db — Environment-variable access.
repo/apps/desktop/src/main/core/App.ts:102 
    process.env.PATH = `${process.env.PATH}${pathSep}${getCliWrapperDir()}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90bec283806669cf — Environment-variable access.
repo/apps/desktop/src/main/core/App.ts:475 
    const ipcId = process.env.LOBE_IPC_ID || name;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f94e619e0adea4b5 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:450 
    const current = process.env.PATH ?? '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea35fe818f2a6da1 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:453 
    process.env.PATH = current ? `${current}${sep}${dir}` : dir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae748da0e4a7136a — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:552 
    await writeFile(tmpMarker, resolvedVersion, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7269330f056cc9a — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:554 
    await writeFile(markerPath, resolvedVersion, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce2a6ef856d5951e — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:630 
      const raw = await readFile(this.installedMarkerPath(name), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca93d618cf1a512a — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/LocalFileProtocolManager.ts:138 
          const buffer = await readFile(realResolvedPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #930ee23826c617d7 — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/LocalFileProtocolManager.ts:289 
    const buffer = await readFile(realFilePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2e14c1f2d80fe59f — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/RendererProtocolManager.ts:195 
    const buffer = await readFile(targetPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ec3f730ca52263e — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/RendererUrlManager.ts:98 
    const electronRendererUrl = process.env['ELECTRON_RENDERER_URL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dd75d27232c118df — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:52 
  await writeFile(path.join(dir, fileName), fileContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #501a21466305662e — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:53 
  await writeFile(path.join(cacheRoot, name, '.installed'), version, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #eb03e76ffd87b13d — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:65 
  originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dbd6c2a6dfa5fef4 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:69 
  process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #37b1cf1685bdbf51 — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:176 
      await writeFile(path.join(cacheRoot, 'foo', '.installed'), '1.0.0', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7f8839a2c58cca51 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:201 
      const before = process.env.PATH ?? '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4632392b4e033992 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:206 
      expect((process.env.PATH ?? '').split(sep)).toContain(installDir);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #46cf44304da6a582 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:210 
      const segments = (process.env.PATH ?? '').split(sep);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ff192f75dbae95bd — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:212 
      expect(process.env.PATH).toContain(before);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #44bc95fa2b7eab6b — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/RendererUrlManager.test.ts:54 
    delete process.env['ELECTRON_RENDERER_URL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #21b1172c001617f0 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/RendererUrlManager.test.ts:95 
      process.env['ELECTRON_RENDERER_URL'] = 'http://localhost:5173';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #63b946a310e18ac5 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/RendererUrlManager.test.ts:121 
      process.env['ELECTRON_RENDERER_URL'] = 'http://localhost:5173';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b98a66527e63a1bc — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/RendererUrlManager.test.ts:142 
      process.env['ELECTRON_RENDERER_URL'] = 'http://localhost:5173';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #58bd6f8acede6369 — Environment-variable access.
repo/apps/desktop/src/main/env.ts:56 
  DESKTOP_BACKEND_PROXY_RETHROW_ERRORS: process.env.DESKTOP_BACKEND_PROXY_RETHROW_ERRORS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a9f657111b527538 — Environment-variable access.
repo/apps/desktop/src/main/env.ts:57 
  DESKTOP_EXTERNAL_NAVIGATION_HOSTS: process.env.DESKTOP_EXTERNAL_NAVIGATION_HOSTS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #248c128f8fe0b306 — Environment-variable access.
repo/apps/desktop/src/main/env.ts:58 
  UPDATE_CHANNEL: process.env.UPDATE_CHANNEL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f8602362ae5ed1c0 — Environment-variable access.
repo/apps/desktop/src/main/env.ts:59 
  UPDATE_SERVER_URL: process.env.UPDATE_SERVER_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f6957bccaac0d9a0 — Environment-variable access.
repo/apps/desktop/src/main/env.ts:108 
      UPDATE_CHANNEL: z.string().optional().default(process.env.UPDATE_CHANNEL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ccfa3229473c23d3 — Environment-variable access.
repo/apps/desktop/src/main/env.ts:112 
      UPDATE_SERVER_URL: z.string().optional().default(process.env.UPDATE_SERVER_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7ea6243ec4351a37 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:189 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #664272e2392b29a7 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:190 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6e5c74d755c64336 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:191 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cf801ce219062023 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:192 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9b2781140ee64139 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:211 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f93651b6371c988a — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:212 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9b3f27c32b42ba57 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:213 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b0a85d0b87809ae9 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:218 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0ec4422e72661695 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:219 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #601e83b1d366994d — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:220 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #41475299f406115a — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:221 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1acdba497a3e1f79 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:236 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5552dd7d7c4d65da — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:237 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f46030912790b30d — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:238 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #069fac8fd00e8d9d — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:243 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e355d0e934e0982f — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:244 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ea1864b2529567e7 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:247 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #50a541ce31b1aeaf — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:248 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d84ad04203bfdcbb — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:267 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2a54ea938c45efee — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:268 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #eb4424ea064c5019 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:269 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d94f29cbebd31d72 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:274 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #063fb681fd45ab3f — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:275 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #98179d8bed29900c — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:276 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5151c6b4a13206bb — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:277 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #54d0aa204750f4ed — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:295 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1192cc09dedfcd4c — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:296 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8b546cb6c8ae0802 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:297 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #07bc6d9c90c08fea — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:313 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #943c6ac18c649887 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:314 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6a3a34c3ffe1cba0 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:315 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2fab898d7a775ed2 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:316 
      process.env.SHELL = '/bin/zsh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7e65f399833037bf — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:354 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9e67e5e35e3fba82 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:355 
        process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6264916db9b6dc9d — Environment-variable access.
repo/apps/desktop/src/main/modules/browser/importChromeLoginData.ts:44 
          process.env.PROGRAMFILES || 'C:\\Program Files',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d4ee56e73281508 — Environment-variable access.
repo/apps/desktop/src/main/modules/browser/importChromeLoginData.ts:47 
        userData: path.join(process.env.LOCALAPPDATA || '', 'Google/Chrome/User Data'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e918248ba348b0e4 — Filesystem access.
repo/apps/desktop/src/main/modules/browser/importChromeLoginData.ts:78 
      const [port, browserPath] = (await readFile(portFile, 'utf8')).trim().split('\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #45e2ba87f3b0e4d9 — Filesystem access.
repo/apps/desktop/src/main/modules/browser/importChromeLoginData.ts:135 
  const localState = JSON.parse(await readFile(localStatePath, 'utf8')) as ChromeLocalState;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eff7705de7e5d161 — Environment-variable access.
repo/apps/desktop/src/main/modules/cliEmbedding/generateCliWrapper.ts:16 
  if (process.platform === 'linux' && process.env.APPIMAGE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a53445535bfc1375 — Environment-variable access.
repo/apps/desktop/src/main/modules/cliEmbedding/generateCliWrapper.ts:17 
    return process.env.APPIMAGE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a7a2b22a80d8c573 — Filesystem access.
repo/apps/desktop/src/main/modules/cliEmbedding/generateCliWrapper.ts:95 
  await writeFile(tmpPath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ede827d04341b662 — Environment-variable access.
repo/apps/desktop/src/main/modules/heterogeneousAgent/claudeCodeQuota.ts:55 
): string | undefined => (options.env && key in options.env ? options.env[key] : process.env[key]);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0bc0983594de5f73 — Filesystem access.
repo/apps/desktop/src/main/modules/heterogeneousAgent/claudeCodeQuota.ts:133 
    return parseCredentialsJson(await readFile(path.join(configDir, '.credentials.json'), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ae60d1de604d8fd — Environment-variable access.
repo/apps/desktop/src/main/modules/heterogeneousAgent/claudeCodeQuota.ts:150 
  asNonEmpty(process.env.CLAUDE_CONFIG_DIR);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #ed68f038bf6aecc4 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/desktop/src/main/modules/heterogeneousAgent/claudeCodeQuota.ts:310 
    const response = await fetch(OAUTH_USAGE_URL, {
      headers: {
        'Authorization': `Bearer ${lookup.credentials.accessToken}`,
        'Content-Type': 'application/json',
        'User-Agent': OAUTH_USER_AGENT,
        'anthropic-beta': OAUTH_BETA_HEADER,
      },
      signal: controller.signal,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #3c9c03cc16a7371d — Environment-variable access.
repo/apps/desktop/src/main/modules/heterogeneousAgent/codexQuota.ts:98 
  codexHomePath ?? env?.CODEX_HOME ?? process.env.CODEX_HOME ?? path.join(homedir(), '.codex');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87258aeacca10ae0 — Filesystem access.
repo/apps/desktop/src/main/modules/heterogeneousAgent/codexQuota.ts:195 
    auth = JSON.parse(await readFile(authPath, 'utf8')) as CodexAuthFile;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #0af4a07e34c4093e — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/desktop/src/main/modules/heterogeneousAgent/codexQuota.ts:230 
    const response = await fetch(CODEX_RATE_LIMIT_RESET_CREDITS_URL, {
      ...auth,
      signal: controller.signal,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #d81a298e3479dcf9 — Filesystem access.
repo/apps/desktop/src/main/modules/openInApp/iconExtractor.ts:145 
    const buf = await readFile(outPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e2f8f0fca0c38d04 — Environment-variable access.
repo/apps/desktop/src/main/modules/terminal/index.ts:42 
  if (process.platform === 'win32') return process.env.ComSpec || 'powershell.exe';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f6fd770c5c5e8900 — Environment-variable access.
repo/apps/desktop/src/main/modules/terminal/index.ts:43 
  return process.env.SHELL || (process.platform === 'darwin' ? '/bin/zsh' : '/bin/bash');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe9d3b3346909f76 — Environment-variable access.
repo/apps/desktop/src/main/pre-app-init.ts:20 
  const userDataOverride = process.env.LOBE_DESKTOP_USER_DATA_DIR;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7a6ff5034cfb754 — Filesystem access.
repo/apps/desktop/src/main/services/fileSrv.ts:100 
      await writeFile(savedPath, buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b352a42435b95296 — Filesystem access.
repo/apps/desktop/src/main/services/fileSrv.ts:112 
      await writeFile(metaFilePath, JSON.stringify(metadata, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): e2e

npm first-party
expand_more 28 low-confidence finding(s)
low env_fs production #81d2ef406d903021 — Environment-variable access.
repo/e2e/cucumber.config.js:4 
const reportsEnabled = !['0', 'false'].includes(String(process.env.E2E_REPORTS).toLowerCase());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1babb1d2af07974f — Environment-variable access.
repo/e2e/cucumber.config.js:5 
const parsedParallel = Number(process.env.E2E_PARALLEL || process.env.CUCUMBER_PARALLEL || 1);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6840503004449ad7 — Environment-variable access.
repo/e2e/cucumber.config.js:7 
const canRunInParallel = Boolean(process.env.BASE_URL);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0740ffbe8fbe33a8 — Environment-variable access.
repo/e2e/src/steps/auth/oidc-device-flow.steps.ts:48 
  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #178b450b1ceb95d7 — Environment-variable access.
repo/e2e/src/steps/common/auth.steps.ts:36 
  const PORT = process.env.PORT ? Number(process.env.PORT) : 3006;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c3317c2dc9082eb — Environment-variable access.
repo/e2e/src/steps/common/auth.steps.ts:37 
  const baseURL = process.env.BASE_URL || `http://localhost:${PORT}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low pii_flow production #630d39367761b145 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Same-origin destination — not external exfiltration.
repo/e2e/src/steps/common/auth.steps.ts:41 · flow /tmp/closeopen-9mgsdxzw/repo/e2e/src/steps/common/auth.steps.ts:36 → /tmp/closeopen-9mgsdxzw/repo/e2e/src/steps/common/auth.steps.ts:41 
    const response = await api.post('/api/auth/sign-in/email', {
      data: {
        email: TEST_USER.email,
        password: TEST_USER.password,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
low env_fs production #b8a7268d76510c18 — Environment-variable access.
repo/e2e/src/steps/home/sidebarAgent.steps.ts:62 
  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #841e95f586ba9fe9 — Environment-variable access.
repo/e2e/src/steps/home/sidebarGroup.steps.ts:22 
  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b579fb9ecba1568 — Environment-variable access.
repo/e2e/src/steps/hooks.ts:9 
process.env['E2E'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4fb0ce32bb17060d — Environment-variable access.
repo/e2e/src/steps/hooks.ts:20 
  const PORT = process.env.PORT ? Number(process.env.PORT) : 3006;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d38ba13cebdcdb75 — Environment-variable access.
repo/e2e/src/steps/hooks.ts:21 
  baseUrl = process.env.BASE_URL || `http://localhost:${PORT}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b4c02b394be428c3 — Environment-variable access.
repo/e2e/src/steps/hooks.ts:29 
  if (!process.env.BASE_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9bda20cddc45636 — Environment-variable access.
repo/e2e/src/steps/hooks.ts:33 
      reuseExistingServer: !process.env.CI,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low pii_flow production #d3d443361b53bce8 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Same-origin destination — not external exfiltration.
repo/e2e/src/steps/hooks.ts:42 · flow /tmp/closeopen-9mgsdxzw/repo/e2e/src/steps/hooks.ts:20 → /tmp/closeopen-9mgsdxzw/repo/e2e/src/steps/hooks.ts:42 
    const response = await api.post('/api/auth/sign-in/email', {
      data: {
        email: TEST_USER.email,
        password: TEST_USER.password,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
low env_fs production #d31c3407087a6da0 — Environment-variable access.
repo/e2e/src/steps/hooks.ts:140 
  if (!process.env.BASE_URL && process.env.CI) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8249da87c2130f60 — Environment-variable access.
repo/e2e/src/support/seedTestUser.ts:5 
const runId = process.env.E2E_RUN_ID || process.env.GITHUB_RUN_ID || 'local';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85933f82e2e6c4f2 — Environment-variable access.
repo/e2e/src/support/seedTestUser.ts:6 
const workerId = process.env.CUCUMBER_WORKER_ID || process.env.E2E_WORKER_ID || 'local';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eaaaaee8ed4c16a4 — Environment-variable access.
repo/e2e/src/support/seedTestUser.ts:33 
  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca52885e6d139df6 — Environment-variable access.
repo/e2e/src/support/seedTestUser.ts:106 
  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba542bd160f99176 — Environment-variable access.
repo/e2e/src/support/seedTestUser.ts:142 
  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1e8f0f3cd9bc4ef — Environment-variable access.
repo/e2e/src/support/webServer.ts:39 
  const envHost = process.env.HOST?.trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1022bad31f9c1257 — Filesystem access.
repo/e2e/src/support/webServer.ts:110 
    writeFileSync(LOCK_FILE, String(process.pid));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #104b9b86212efb49 — Environment-variable access.
repo/e2e/src/support/webServer.ts:147 
      JWKS_KEY: process.env.JWKS_KEY || createTestOidcJwks(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33b3d14041257922 — Environment-variable access.
repo/e2e/src/support/world.ts:27 
      headless: process.env.HEADLESS !== 'false',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d567047bfa66be29 — Environment-variable access.
repo/e2e/src/support/world.ts:66 
    const PORT = process.env.PORT ? Number(process.env.PORT) : 3006;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #676d7b5ffbb161e7 — Environment-variable access.
repo/e2e/src/support/world.ts:67 
    const BASE_URL = process.env.BASE_URL || `http://localhost:${PORT}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c50252f31b655688 — Filesystem access.
repo/e2e/src/support/world.ts:110 
    fs.writeFileSync(filepath, screenshot);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/agent-runtime

npm first-party
expand_more 3 low-confidence finding(s)
low env_fs test-only #b7a44a19d7cc97f6 — Environment-variable access.
repo/packages/agent-runtime/examples/tools-calling.ts:10 
    apiKey: process.env.OPENAI_API_KEY || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2194497ec155ab92 — Environment-variable access.
repo/packages/agent-runtime/examples/tools-calling.ts:237 
  if (!process.env.OPENAI_API_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f20040f7be7d9769 — Filesystem access.
repo/packages/agent-runtime/src/agents/__tests__/GraphAgent.test.ts:104 
    readFileSync(path.join(TEST_DIR, 'fixtures/goal-loop.graph.json'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/agent-tracing

npm first-party
expand_more 17 low-confidence finding(s)
low env_fs production #ffc119c3df14c150 — Filesystem access.
repo/packages/agent-tracing/src/cli/ctx-lint.ts:67 
      const snap = JSON.parse(await readFile(path.join(dir, f), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5301374bc8a3ace3 — Filesystem access.
repo/packages/agent-tracing/src/cli/ctx-lint.ts:109 
            : [JSON.parse(await readFile(target, 'utf8'))];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb09bb1d9e701fe2 — Filesystem access.
repo/packages/agent-tracing/src/cli/tool-quality.ts:57 
      out.push(JSON.parse(await readFile(path.join(dir, f), 'utf8')));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba7fc2364ef3fafa — Filesystem access.
repo/packages/agent-tracing/src/cli/tool-quality.ts:195 
            snapshot = JSON.parse(await readFile(file, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #015989547aa0e95e — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:27 
    await fs.writeFile(filePath, JSON.stringify(snapshot, null, 2), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91ff12efa6edc162 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:46 
      const content = await fs.readFile(path.join(this.dir, match), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b287f402ba365fc6 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:66 
        const content = await fs.readFile(path.join(this.dir, file), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b47f87975110d1c1 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:81 
      const content = await fs.readFile(realPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ddf204b162b2476f — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:88 
      const content = await fs.readFile(path.join(this.dir, files[0]), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd862957a1e816df — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:122 
      const content = await fs.readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8678680bf9d73d43 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:129 
      const content = await fs.readFile(path.join(this.partialDir(), match), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ce97ea48c1f6ec6 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:136 
      const content = await fs.readFile(this.partialPath(operationId), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e87c4a6e935d7eda — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:145 
    await fs.writeFile(this.partialPath(operationId), JSON.stringify(partial), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #779aae0447b7b1c5 — Environment-variable access.
repo/packages/agent-tracing/src/store/remote-store.ts:57 
  if (process.env.TRACING_BASE_URL) return process.env.TRACING_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ade5cf6cf80c0ea — Filesystem access.
repo/packages/agent-tracing/src/store/remote-store.ts:63 
    const content = await fs.readFile(envPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a730ddc0bad1ee24 — Filesystem access.
repo/packages/agent-tracing/src/store/remote-store.ts:92 
      const content = await fs.readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9d4c45cc8a1ff5e — Filesystem access.
repo/packages/agent-tracing/src/store/remote-store.ts:148 
    await fs.writeFile(filePath, JSON.stringify(snapshot, null, 2), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/app-config

npm first-party
expand_more 11 low-confidence finding(s)
low env_fs production #75b576d79e3ee5e0 — Environment-variable access.
repo/packages/app-config/src/composio.ts:8 
      COMPOSIO_API_KEY: process.env.COMPOSIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6f5d0732dfc1c22d — Environment-variable access.
repo/packages/app-config/src/composio.ts:9 
      COMPOSIO_AUTH_CONFIG_IDS: process.env.COMPOSIO_AUTH_CONFIG_IDS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d3f1cc14f330fb4d — Environment-variable access.
repo/packages/app-config/src/db.ts:7 
      DATABASE_DRIVER: process.env.DATABASE_DRIVER || 'neon',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed94d52b16c81550 — Environment-variable access.
repo/packages/app-config/src/db.ts:8 
      DATABASE_STATEMENT_TIMEOUT: process.env.DATABASE_STATEMENT_TIMEOUT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #857d31e1b10de39e — Environment-variable access.
repo/packages/app-config/src/db.ts:9 
      DATABASE_TEST_URL: process.env.DATABASE_TEST_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0ae17a340710b4e — Environment-variable access.
repo/packages/app-config/src/db.ts:10 
      DATABASE_URL: process.env.DATABASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bdbd416049f4666a — Environment-variable access.
repo/packages/app-config/src/db.ts:12 
      KEY_VAULTS_SECRET: process.env.KEY_VAULTS_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4ec1e9905f73062a — Environment-variable access.
repo/packages/app-config/src/db.ts:14 
      REMOVE_GLOBAL_FILE: process.env.DISABLE_REMOVE_GLOBAL_FILE !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9991cb73ca81a9c6 — Environment-variable access.
repo/packages/app-config/src/featureFlags/index.ts:11 
    FEATURE_FLAGS: process.env.FEATURE_FLAGS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5465661f57827e85 — Environment-variable access.
repo/packages/app-config/src/featureFlags/schema.ts:5 
const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #980c33ef917a82f2 — Environment-variable access.
repo/packages/app-config/src/messenger.ts:36 
      LOBE_LINK_TOKEN_TTL_SECONDS: process.env.LOBE_LINK_TOKEN_TTL_SECONDS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/builtin-tool-cloud-sandbox

npm first-party
expand_more 2 low-confidence finding(s)
low env_fs production #f3aada37c60d212a — Filesystem access.
repo/packages/builtin-tool-cloud-sandbox/src/executor/index.ts:101 
    const result = await runtime.readFile(params);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dfb04e8d47a180a0 — Filesystem access.
repo/packages/builtin-tool-cloud-sandbox/src/executor/index.ts:110 
    const result = await runtime.writeFile(params);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/builtin-tool-creds

npm first-party
expand_more 1 low-confidence finding(s)
low env_fs production #5b836b6292ee1676 — Environment-variable access.
repo/packages/builtin-tool-creds/src/ExecutionRuntime/index.ts:171 
      const appUrl = (process.env.APP_URL || OFFICIAL_URL).replace(/\/+$/, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/builtin-tool-local-system

npm first-party
expand_more 2 low-confidence finding(s)
low env_fs production #0b484f993e5c9867 — Filesystem access.
repo/packages/builtin-tool-local-system/src/client/executor/index.ts:105 
      const result = await this.runtime.readFile({
        endLine: params.loc?.[1],
        path: params.path,
        startLine: params.loc?.[0],
      });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #779a9d8c13d46975 — Filesystem access.
repo/packages/builtin-tool-local-system/src/client/executor/index.ts:154 
      const result = await this.runtime.writeFile(params);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/builtin-tool-skills

npm first-party
expand_more 2 low-confidence finding(s)
low env_fs production #ac08cae643614a11 — Filesystem access.
repo/packages/builtin-tool-skills/src/ExecutionRuntime/index.ts:320 
        const content = await this.deviceFileAccess.readFile(fullPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1198a04a69d5f60 — Filesystem access.
repo/packages/builtin-tool-skills/src/ExecutionRuntime/index.ts:408 
        let content = await this.deviceFileAccess.readFile(projectSkill.location);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/chat-adapter-qq

npm first-party
expand_more 1 low-confidence finding(s)
low egress production #1ef51e0393dc52af — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/chat-adapter-qq/src/api.ts:29 
    const response = await fetch(AUTH_URL, {
      body: JSON.stringify({
        appId: this.appId,
        clientSecret: this.clientSecret,
      }),
      headers: { 'Content-Type': 'application/json' },
      method: 'POST',
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

first-party (npm): packages/database

npm first-party
expand_more 25 low-confidence finding(s)
low env_fs production #809c6498eb6d498d — Environment-variable access.
repo/packages/database/src/core/getTestDB.ts:19 
const isServerDBMode = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d7f692dbad47233 — Environment-variable access.
repo/packages/database/src/core/web-server.ts:14 
  if (process.env.NODE_ENV === 'test') return {} as LobeChatDatabase;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2de4e22d81e5ee18 — Environment-variable access.
repo/packages/database/src/core/web-server.ts:57 
  if (process.env.MIGRATION_DB === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #63f5c36d42df8156 — Environment-variable access.
repo/packages/database/src/models/__tests__/apiKey.test.ts:21 
  originalKeyVaultsSecret = process.env.KEY_VAULTS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e1121098891c314c — Environment-variable access.
repo/packages/database/src/models/__tests__/apiKey.test.ts:22 
  process.env.KEY_VAULTS_SECRET = validKeyVaultsSecret;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a5d0b3f9dbe47998 — Environment-variable access.
repo/packages/database/src/models/__tests__/apiKey.test.ts:31 
  process.env.KEY_VAULTS_SECRET = originalKeyVaultsSecret;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0faf82b2d7604173 — Environment-variable access.
repo/packages/database/src/models/__tests__/apiKey.test.ts:177 
      process.env.KEY_VAULTS_SECRET = 'Q10pwdq00KXUu9R+c8A8p4PSlIRWi7KwgUophBtkHVk=';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #727d9472ad89acc8 — Filesystem access.
repo/packages/database/src/models/__tests__/jsonbNullTest.test.ts:42 
      readFileSync(file, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5169667c0b2340de — Environment-variable access.
repo/packages/database/src/models/__tests__/messages/message.query.test.ts:1487 
  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9fcf07aa003215fb — Environment-variable access.
repo/packages/database/src/models/__tests__/session.test.ts:287 
  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e6f4ed2366cfed8a — Environment-variable access.
repo/packages/database/src/models/__tests__/topics/topic.query.test.ts:1553 
  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #93c2b030cb9444ee — Environment-variable access.
repo/packages/database/src/models/userMemory/__tests__/activity.test.ts:240 
    const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cb864d0b2c4ff5a1 — Environment-variable access.
repo/packages/database/src/models/userMemory/__tests__/experience.test.ts:437 
    const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9ed7971422dd4d94 — Environment-variable access.
repo/packages/database/src/models/userMemory/__tests__/identity.test.ts:455 
    const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e44f551c38bed195 — Environment-variable access.
repo/packages/database/src/models/userMemory/__tests__/model.test.ts:523 
      const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #342bfcdb003b98f3 — Environment-variable access.
repo/packages/database/src/repositories/home/__tests__/index.test.ts:457 
  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5d884285d28611e — Environment-variable access.
repo/packages/database/src/repositories/home/index.test.ts:788 
  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1921cd8985dab73e — Environment-variable access.
repo/packages/database/src/repositories/search/index.test.ts:36 
const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #20393251c0d7758b — Filesystem access.
repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:66 
      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #35763475c4dba509 — Filesystem access.
repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:120 
      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1a7b25060f784a7a — Filesystem access.
repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:175 
      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ce0a7652f6032246 — Filesystem access.
repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:209 
      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8ceb56dc18de92a5 — Filesystem access.
repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:234 
      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f397c4e9617322ea — Environment-variable access.
repo/packages/database/src/server/models/__tests__/user.test.ts:25 
  process.env.KEY_VAULTS_SECRET = 'ofQiJCXLF8mYemwfMWLOHoHimlPu91YmLfU7YZ4lreQ=';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #69a3bcd328546954 — Environment-variable access.
repo/packages/database/src/server/models/__tests__/user.test.ts:31 
  process.env.KEY_VAULTS_SECRET = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/device-control

npm first-party
expand_more 31 low-confidence finding(s)
low env_fs test-only #b7d51628d1a74481 — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:19 
  await writeFile(
    path.join(root, '.agents', 'skills', 'spa-routes', 'SKILL.md'),
    '---\nname: spa-routes\ndescription: SPA routing\n---\nbody',
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #05c2b9de38c9f02b — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:23 
  await writeFile(path.join(root, 'AGENTS.md'), '# Agents');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5b37d6daf2380845 — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:79 
    await writeFile(
      path.join(deviceSkillRoot, 'device-writer', 'SKILL.md'),
      '---\nname: device-writer\ndescription: Device writer\n---\nbody',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1a7d9a50618b0a85 — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:84 
    await writeFile(
      path.join(deviceSkillRoot, 'spa-routes', 'SKILL.md'),
      '---\nname: spa-routes\ndescription: Device duplicate\n---\nbody',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ba07eef7c4496fe3 — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:112 
    await writeFile(
      path.join(root, '.agents', 'skills', 'agent-testing', 'SKILL.md'),
      [
        '---',
        'name: agent-testing',
        'description: >',
        '  Agentic end-to-end testing for LobeHub: backend verification via the CLI,',
        '  frontend verification via agent-browser (Electron).',
        '---',
        'body',
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bac2d93dc50e7512 — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:165 
    await writeFile(oldPath, 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7e3cba7ecfab98f4 — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:180 
    await writeFile(filePath, 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2e85dca0794b98c2 — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:202 
    expect(await readFile(filePath, 'utf8')).toBe('remote edit');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #893c80629b85c3ce — Filesystem access.
repo/packages/device-control/src/__tests__/filePreview.test.ts:15 
  await writeFile(path.join(root, 'note.txt'), 'hello preview\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5004dbad44aa2ecf — Filesystem access.
repo/packages/device-control/src/__tests__/filePreview.test.ts:16 
  await writeFile(path.join(root, 'pic.png'), Buffer.from([0x89, 0x50, 0x4e, 0x47, 1, 2, 3]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #111c8e2f8a503fc9 — Filesystem access.
repo/packages/device-control/src/__tests__/filePreview.test.ts:17 
  await writeFile(path.join(outside, 'secret.txt'), 'do not read\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1f5ea6a377fe138a — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:25 
    await writeFile(path.join(dir, 'src', 'index.ts'), 'export const a = 1;\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #004a532a987f25fb — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:26 
    await writeFile(path.join(dir, 'README.md'), '# hi\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a9a625beeec41f7d — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:30 
    await writeFile(path.join(dir, 'scratch.txt'), 'tmp\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a9d3bb98ee00fd9b — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:49 
    await writeFile(path.join(dir, 'one.txt'), '1\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #95d539211e3c83f4 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:50 
    await writeFile(path.join(dir, 'nested', 'deep', 'two.txt'), '2\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #60b5c2fa4681ab54 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:51 
    await writeFile(path.join(dir, '.agents', 'config.md'), '# cfg\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bb1ffd0058b99c7d — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:80 
    await writeFile(
      path.join(dir, 'src', 'components', 'Button.tsx'),
      'export const Button = 1;\n',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2e4db90f9a47e2d5 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:84 
    await writeFile(path.join(dir, 'src', 'components', 'Input.tsx'), 'export const Input = 1;\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4bff32a9a4c4ad36 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:102 
    await writeFile(path.join(dir, 'nested', 'deep', 'target-file.ts'), 'target\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e93672e27cfa2d82 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:103 
    await writeFile(path.join(dir, 'nested', 'deep', 'other.ts'), 'other\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ab0da7539bc03fa3 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:119 
    await writeFile(path.join(dir, '.agents', 'skills', 'target-skill.md'), 'skill\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4d23a3e0b622f337 — Filesystem access.
repo/packages/device-control/src/__tests__/skillDirectory.test.ts:45 
    await expect(readFile(path.join(result.extractedDir, 'SKILL.md'), 'utf8')).resolves.toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #985dcf28c729d722 — Filesystem access.
repo/packages/device-control/src/__tests__/skillDirectory.test.ts:49 
      readFile(path.join(result.extractedDir, 'scripts', 'run.sh'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #087cf72f2ff0f062 — Filesystem access.
repo/packages/device-control/src/__tests__/skillDirectory.test.ts:51 
    const marker = JSON.parse(await readFile(path.join(result.extractedDir, '.prepared'), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c4af0761da0a3547 — Filesystem access.
repo/packages/device-control/src/filePreview.ts:121 
    const buffer = await readFile(realFile);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91e76e7952145404 — Filesystem access.
repo/packages/device-control/src/skillDirectory.ts:99 
      await writeFile(zipPath, buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d50cf050aeb1b335 — Filesystem access.
repo/packages/device-control/src/skillDirectory.ts:111 
        await writeFile(targetPath, Buffer.from(fileContent as Uint8Array));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c1621102280d9ef8 — Filesystem access.
repo/packages/device-control/src/skillDirectory.ts:114 
      await writeFile(
        path.join(stagingDir, '.prepared'),
        JSON.stringify({ preparedAt: Date.now(), url, zipHash }),
        'utf8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb4a0cbe2c515228 — Filesystem access.
repo/packages/device-control/src/workspace.ts:142 
          const raw = await readFile(skillFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d727cf3a6b70c35 — Filesystem access.
repo/packages/device-control/src/workspace.ts:204 
      const raw = await readFile(path.join(root, source), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/device-gateway-client

npm first-party
expand_more 3 low-confidence finding(s)
low pii_flow production #f038fe0d3ff6fc9d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Same-origin destination — not external exfiltration.
repo/packages/device-gateway-client/src/http.ts:127 · flow /tmp/closeopen-9mgsdxzw/repo/packages/device-gateway-client/src/http.ts:134 → /tmp/closeopen-9mgsdxzw/repo/packages/device-gateway-client/src/http.ts:127 
    const res = await this.post(
      '/api/device/tool-call',
      {
        deviceId: params.deviceId,
        operationId: params.operationId,
        timeout: params.timeout,
        toolCall,
        userId: params.userId,
        workspaceId: params.workspaceId,
      },
      { timeout: timeout + HTTP_CALL_TIMEOUT_PADDING_MS },
    );

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
low pii_flow production #d1f8a3760467d3c2 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Same-origin destination — not external exfiltration.
repo/packages/device-gateway-client/src/http.ts:175 · flow /tmp/closeopen-9mgsdxzw/repo/packages/device-gateway-client/src/http.ts:179 → /tmp/closeopen-9mgsdxzw/repo/packages/device-gateway-client/src/http.ts:175 
    const res = await this.post('/api/device/message-api', {
      api,
      deviceId: params.deviceId,
      timeout: params.timeout,
      userId: params.userId,
      workspaceId: params.workspaceId,
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
low pii_flow production #691ff7d5efd44a45 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Same-origin destination — not external exfiltration.
repo/packages/device-gateway-client/src/http.ts:250 · flow /tmp/closeopen-9mgsdxzw/repo/packages/device-gateway-client/src/http.ts:257 → /tmp/closeopen-9mgsdxzw/repo/packages/device-gateway-client/src/http.ts:250 
    const res = await this.post(
      '/api/device/rpc',
      {
        deviceId: params.deviceId,
        method: rpc.method,
        params: rpc.params,
        timeout: params.timeout,
        userId: params.userId,
        workspaceId: params.workspaceId,
      },
      { timeout: timeout + HTTP_CALL_TIMEOUT_PADDING_MS },
    );

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

first-party (npm): packages/electron-server-ipc

npm first-party
expand_more 2 low-confidence finding(s)
low env_fs production #f24163502ce28b00 — Filesystem access.
repo/packages/electron-server-ipc/src/ipcClient.ts:50 
        const socketInfo = JSON.parse(fs.readFileSync(socketInfoPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b4fff90ec39a5c4 — Filesystem access.
repo/packages/electron-server-ipc/src/ipcServer.ts:56 
        fs.writeFileSync(socketInfoPath, JSON.stringify({ socketPath: this.socketPath }), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/env

npm first-party
expand_more 430 low-confidence finding(s)
low env_fs test-only #4e0c3293e198ad25 — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:19 
    process.env.PLAUSIBLE_DOMAIN = 'example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fc4dbfe0e2d60edf — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:20 
    process.env.POSTHOG_KEY = 'posthog_key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8179badaef146b5d — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:21 
    process.env.UMAMI_WEBSITE_ID = 'umami_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dd53cbf8be020999 — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:22 
    process.env.CLARITY_PROJECT_ID = 'clarity_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6b436fe87a8132dd — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:23 
    process.env.ENABLE_VERCEL_ANALYTICS = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bfa7a3307a3585bc — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:24 
    process.env.GOOGLE_ANALYTICS_MEASUREMENT_ID = 'ga_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5d70d74800d6e839 — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:25 
    process.env.X_ADS_PIXEL_ID = 'tw-pixel_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #22ef018badb4df78 — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:26 
    process.env.X_ADS_LOGIN_OR_SIGNUP_CLICKED_EVENT_ID = 'tw-pixel_id-login_or_signup_clicked';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f2a97151955d6e71 — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:27 
    process.env.X_ADS_MAIN_PAGE_VIEW_EVENT_ID = 'tw-pixel_id-main_page_view';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fd84c4c9a9b56d22 — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:28 
    process.env.X_ADS_PURCHASE_EVENT_ID = 'tw-pixel_id-purchase_event_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #73b8469dcd956fc4 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:23 
      process.env.AGENTS_INDEX_URL = 'https://custom-agents-url.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3ab881cd70dc82e7 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:24 
      process.env.PLUGINS_INDEX_URL = 'https://custom-plugins-url.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f499c16d4f19481c — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:32 
      process.env.AGENTS_INDEX_URL = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b0562878ab96385c — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:33 
      process.env.PLUGINS_INDEX_URL = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b01337c1bddcb9e5 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:48 
      process.env.APP_URL = 'https://example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #14f31b08a9fc5bd3 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:49 
      delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #551ca081e69d984b — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:57 
      process.env.APP_URL = 'https://public.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9be52838b42ea23c — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:58 
      process.env.INTERNAL_APP_URL = 'http://localhost:3210';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b72e8c794d63e8d2 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:66 
      process.env.APP_URL = 'https://public.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c4c4f07dca6a6cdf — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:67 
      process.env.INTERNAL_APP_URL = 'http://internal-service:3210';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0f9b2fb303280036 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:76 
      process.env.APP_URL = 'https://cloudflare-proxied.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b75aa5c57ee9addd — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:77 
      process.env.INTERNAL_APP_URL = 'http://127.0.0.1:3210';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #db442410f1383bf3 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:90 
    delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9c09631e3ab27dd4 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:91 
    delete process.env.VERCEL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #55483c1720c67bc1 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:92 
    delete process.env.VERCEL_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a6d672563d30d3a9 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:93 
    delete process.env.VERCEL_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #27ed5552a54f7018 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:94 
    delete process.env.VERCEL_BRANCH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #857c3441bbd9dd3a — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:95 
    delete process.env.VERCEL_PROJECT_PRODUCTION_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #945668a4f5e25464 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:99 
    process.env.APP_URL = 'https://custom-app.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6d830d6c8cea1d37 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:100 
    process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #67cf2af1b7d81b20 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:109 
      process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8307f36d5fa1a38c — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:110 
      process.env.VERCEL_ENV = 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5177d4c7cf2e01c5 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:111 
      process.env.VERCEL_PROJECT_PRODUCTION_URL = 'lobechat.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b2740fc618fee5e9 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:112 
      process.env.VERCEL_BRANCH_URL = 'lobechat-git-main-org.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5716b5f7f51e3dcb — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:113 
      process.env.VERCEL_URL = 'lobechat-abc123.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7e57b7584d8f00ed — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:121 
      process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ecf5f5989fed13cb — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:122 
      process.env.VERCEL_ENV = 'preview';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #415479ca6fe5ad9e — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:123 
      process.env.VERCEL_BRANCH_URL = 'lobechat-git-feature-org.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2ba46cf0a5d84352 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:124 
      process.env.VERCEL_URL = 'lobechat-abc123.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #42b067fe0b2196b4 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:132 
      process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #24e9278ac9b5d648 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:133 
      process.env.VERCEL_ENV = 'preview';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #577971dec7c04dfd — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:134 
      process.env.VERCEL_BRANCH_URL = 'lobechat-git-feature-org.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3adc79c5093f43aa — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:13 
    process.env.NEXT_PUBLIC_ANALYTICS_PLAUSIBLE = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5bce171cd1a84e14 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:14 
    process.env.NEXT_PUBLIC_ANALYTICS_POSTHOG = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5da3ca26c75212b0 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:15 
    process.env.NEXT_PUBLIC_POSTHOG_DEBUG = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #afb0946b4ac1a589 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:16 
    process.env.NEXT_PUBLIC_I18N_DEBUG = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2ffb370ed8f6baaa — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:17 
    process.env.NEXT_PUBLIC_I18N_DEBUG_BROWSER = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #684b73fdfeb1cfa3 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:18 
    process.env.NEXT_PUBLIC_I18N_DEBUG_SERVER = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5e8e97dcf2ba9ce1 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:27 
    process.env.NEXT_PUBLIC_ANALYTICS_PLAUSIBLE = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a20113c7b1716292 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:28 
    process.env.NEXT_PUBLIC_ANALYTICS_POSTHOG = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ea8ca4471b3d4097 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:29 
    process.env.NEXT_PUBLIC_POSTHOG_DEBUG = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b9d317659a32b891 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:30 
    process.env.NEXT_PUBLIC_I18N_DEBUG = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e7ab10a1eead1f0d — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:31 
    process.env.NEXT_PUBLIC_I18N_DEBUG_BROWSER = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2ff1350c0e332f77 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:32 
    process.env.NEXT_PUBLIC_I18N_DEBUG_SERVER = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0dca7a4b5e781276 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:7 
    delete process.env.SANDBOX_PROVIDER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f2e4446e4fff887d — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:8 
    delete process.env.ONLYBOXES_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5803e41e6f92c952 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:9 
    delete process.env.ONLYBOXES_JIT_ISSUER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3ead2404fa3eccf4 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:10 
    delete process.env.ONLYBOXES_JIT_SIGNING_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #28f603460a53860f — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:11 
    delete process.env.ONLYBOXES_JIT_TTL_SEC;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ab10993ffcaaf0f4 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:12 
    delete process.env.ONLYBOXES_LEASE_TTL_SEC;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #26f42d9dacda48a7 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:16 
    process.env.SANDBOX_PROVIDER = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dd46d3d482a42028 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:17 
    process.env.ONLYBOXES_BASE_URL = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7850f8d72a9099b5 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:18 
    process.env.ONLYBOXES_JIT_ISSUER = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8c2465d4adb99169 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:19 
    process.env.ONLYBOXES_JIT_SIGNING_KEY = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ef7488d7f655732f — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:20 
    process.env.ONLYBOXES_JIT_TTL_SEC = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7f5d39cc0dad1b8e — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:21 
    process.env.ONLYBOXES_LEASE_TTL_SEC = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #42a5e29259e2dcc8 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:35 
    process.env.SANDBOX_PROVIDER = 'onlyboxes';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #54d7b18e5d6f7b72 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:36 
    process.env.ONLYBOXES_BASE_URL = 'https://onlyboxes.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #036076501df7d24e — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:37 
    process.env.ONLYBOXES_JIT_ISSUER = 'lobehub-test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6656f7587daadc40 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:38 
    process.env.ONLYBOXES_JIT_SIGNING_KEY = 'jit-signing-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #09358ee09a2a0eaf — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:39 
    process.env.ONLYBOXES_JIT_TTL_SEC = '900';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #913ebf4b6dea53dd — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:40 
    process.env.ONLYBOXES_LEASE_TTL_SEC = '3600';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c6cc8892985e5ae — Environment-variable access.
repo/packages/env/src/analytics.ts:39 
      ENABLED_PLAUSIBLE_ANALYTICS: !!process.env.PLAUSIBLE_DOMAIN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c394fd6a36667d70 — Environment-variable access.
repo/packages/env/src/analytics.ts:40 
      PLAUSIBLE_DOMAIN: process.env.PLAUSIBLE_DOMAIN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ddea10c917744e3 — Environment-variable access.
repo/packages/env/src/analytics.ts:41 
      PLAUSIBLE_SCRIPT_BASE_URL: process.env.PLAUSIBLE_SCRIPT_BASE_URL || 'https://plausible.io',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9621f6cf61e318ea — Environment-variable access.
repo/packages/env/src/analytics.ts:44 
      ENABLED_POSTHOG_ANALYTICS: !!process.env.POSTHOG_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90370fdb38dfccff — Environment-variable access.
repo/packages/env/src/analytics.ts:45 
      POSTHOG_KEY: process.env.POSTHOG_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fdcb6d5b787ecbfd — Environment-variable access.
repo/packages/env/src/analytics.ts:46 
      POSTHOG_HOST: process.env.POSTHOG_HOST || 'https://app.posthog.com',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6371f8f43ff1ae42 — Environment-variable access.
repo/packages/env/src/analytics.ts:47 
      DEBUG_POSTHOG_ANALYTICS: process.env.DEBUG_POSTHOG_ANALYTICS === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d4cbf1f1703a77b — Environment-variable access.
repo/packages/env/src/analytics.ts:50 
      ENABLED_UMAMI_ANALYTICS: !!process.env.UMAMI_WEBSITE_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #869f3cdf9575369e — Environment-variable access.
repo/packages/env/src/analytics.ts:51 
      UMAMI_SCRIPT_URL: process.env.UMAMI_SCRIPT_URL || 'https://analytics.umami.is/script.js',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #55e12330828124b5 — Environment-variable access.
repo/packages/env/src/analytics.ts:52 
      UMAMI_WEBSITE_ID: process.env.UMAMI_WEBSITE_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c9d072df0ba2571 — Environment-variable access.
repo/packages/env/src/analytics.ts:55 
      ENABLED_CLARITY_ANALYTICS: !!process.env.CLARITY_PROJECT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e32e89584d810afb — Environment-variable access.
repo/packages/env/src/analytics.ts:56 
      CLARITY_PROJECT_ID: process.env.CLARITY_PROJECT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61a2be31600a5e4a — Environment-variable access.
repo/packages/env/src/analytics.ts:59 
      ENABLE_VERCEL_ANALYTICS: process.env.ENABLE_VERCEL_ANALYTICS === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa2771db949d5091 — Environment-variable access.
repo/packages/env/src/analytics.ts:60 
      DEBUG_VERCEL_ANALYTICS: process.env.DEBUG_VERCEL_ANALYTICS === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #54fa160d713dd3f0 — Environment-variable access.
repo/packages/env/src/analytics.ts:63 
      ENABLE_GOOGLE_ANALYTICS: !!process.env.GOOGLE_ANALYTICS_MEASUREMENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d15f238641d26c9 — Environment-variable access.
repo/packages/env/src/analytics.ts:64 
      GOOGLE_ANALYTICS_MEASUREMENT_ID: process.env.GOOGLE_ANALYTICS_MEASUREMENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b3c11b401c78d08 — Environment-variable access.
repo/packages/env/src/analytics.ts:67 
      ENABLED_X_ADS: !!process.env.X_ADS_PIXEL_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #71e6617983038ed1 — Environment-variable access.
repo/packages/env/src/analytics.ts:68 
      X_ADS_PIXEL_ID: process.env.X_ADS_PIXEL_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b051bc79b05eb230 — Environment-variable access.
repo/packages/env/src/analytics.ts:69 
      X_ADS_LOGIN_OR_SIGNUP_CLICKED_EVENT_ID: process.env.X_ADS_LOGIN_OR_SIGNUP_CLICKED_EVENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5207127c36edcf2f — Environment-variable access.
repo/packages/env/src/analytics.ts:70 
      X_ADS_MAIN_PAGE_VIEW_EVENT_ID: process.env.X_ADS_MAIN_PAGE_VIEW_EVENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d08d79b6be895b0 — Environment-variable access.
repo/packages/env/src/analytics.ts:71 
      X_ADS_PURCHASE_EVENT_ID: process.env.X_ADS_PURCHASE_EVENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07150fc911cf91e3 — Environment-variable access.
repo/packages/env/src/analytics.ts:75 
      REACT_SCAN_MONITOR_API_KEY: process.env.REACT_SCAN_MONITOR_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #518db35fd61062b5 — Environment-variable access.
repo/packages/env/src/app.ts:4 
const isInVercel = process.env.VERCEL === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f2f3fa106e32ef93 — Environment-variable access.
repo/packages/env/src/app.ts:11 
  if (process.env.VERCEL_ENV === 'production' && process.env.VERCEL_PROJECT_PRODUCTION_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a3e8e7a3198db98 — Environment-variable access.
repo/packages/env/src/app.ts:12 
    return `https://${process.env.VERCEL_PROJECT_PRODUCTION_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f44bd7fa785da15 — Environment-variable access.
repo/packages/env/src/app.ts:14 
  if (process.env.VERCEL_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e52f69491e6c379f — Environment-variable access.
repo/packages/env/src/app.ts:15 
    return `https://${process.env.VERCEL_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #969fdf816c88b3ac — Environment-variable access.
repo/packages/env/src/app.ts:17 
  return `https://${process.env.VERCEL_BRANCH_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #914d6065f9c8487f — Environment-variable access.
repo/packages/env/src/app.ts:20 
const APP_URL = process.env.APP_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0b1d5a9e80e793fa — Environment-variable access.
repo/packages/env/src/app.ts:21 
  ? process.env.APP_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #650cbfec6fd24206 — Environment-variable access.
repo/packages/env/src/app.ts:24 
    : process.env.NODE_ENV === 'development'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #20c40a5a84077f90 — Environment-variable access.
repo/packages/env/src/app.ts:25 
      ? `http://localhost:${process.env.PORT || 3010}`

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #57090e04888ab51b — Environment-variable access.
repo/packages/env/src/app.ts:26 
      : `http://localhost:${process.env.PORT || 3210}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86e2779f7fc44b48 — Environment-variable access.
repo/packages/env/src/app.ts:30 
const INTERNAL_APP_URL = process.env.INTERNAL_APP_URL || APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a54e2147bbe7bd77 — Environment-variable access.
repo/packages/env/src/app.ts:92 
      NEXT_PUBLIC_ENABLE_SENTRY: !!process.env.NEXT_PUBLIC_SENTRY_DSN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f23dac1f9281e4c6 — Environment-variable access.
repo/packages/env/src/app.ts:94 
      AGENTS_INDEX_URL: !!process.env.AGENTS_INDEX_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc25d065fcee2679 — Environment-variable access.
repo/packages/env/src/app.ts:95 
        ? process.env.AGENTS_INDEX_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #41176629ae4b6d9f — Environment-variable access.
repo/packages/env/src/app.ts:98 
      DEFAULT_AGENT_CONFIG: process.env.DEFAULT_AGENT_CONFIG || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cedda54d61614805 — Environment-variable access.
repo/packages/env/src/app.ts:99 
      SYSTEM_AGENT: process.env.SYSTEM_AGENT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4cd68a6408a6a589 — Environment-variable access.
repo/packages/env/src/app.ts:101 
      PLUGINS_INDEX_URL: !!process.env.PLUGINS_INDEX_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13eff46f16438f5b — Environment-variable access.
repo/packages/env/src/app.ts:102 
        ? process.env.PLUGINS_INDEX_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a38ecfba45c24cf4 — Environment-variable access.
repo/packages/env/src/app.ts:105 
      PLUGIN_SETTINGS: process.env.PLUGIN_SETTINGS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e316df3687496d18 — Environment-variable access.
repo/packages/env/src/app.ts:107 
      VERCEL_EDGE_CONFIG: process.env.VERCEL_EDGE_CONFIG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac9663cd222b1b9b — Environment-variable access.
repo/packages/env/src/app.ts:111 
      MIDDLEWARE_REWRITE_THROUGH_LOCAL: process.env.MIDDLEWARE_REWRITE_THROUGH_LOCAL === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2cedad8c425b376 — Environment-variable access.
repo/packages/env/src/app.ts:113 
      CUSTOM_FONT_FAMILY: process.env.CUSTOM_FONT_FAMILY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2e34c920b255177 — Environment-variable access.
repo/packages/env/src/app.ts:114 
      CUSTOM_FONT_URL: process.env.CUSTOM_FONT_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2bded9b9d64bf6fe — Environment-variable access.
repo/packages/env/src/app.ts:115 
      CDN_USE_GLOBAL: process.env.CDN_USE_GLOBAL === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c43f70d07b799f0a — Environment-variable access.
repo/packages/env/src/app.ts:117 
      SSRF_ALLOW_PRIVATE_IP_ADDRESS: process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bdb764692174da37 — Environment-variable access.
repo/packages/env/src/app.ts:118 
      SSRF_ALLOW_IP_ADDRESS_LIST: process.env.SSRF_ALLOW_IP_ADDRESS_LIST,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1adf52d6c2fefc60 — Environment-variable access.
repo/packages/env/src/app.ts:119 
      MARKET_BASE_URL: process.env.MARKET_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4e6028489394baa1 — Environment-variable access.
repo/packages/env/src/app.ts:121 
      MARKET_TRUSTED_CLIENT_SECRET: process.env.MARKET_TRUSTED_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d786a73ed24419e — Environment-variable access.
repo/packages/env/src/app.ts:122 
      MARKET_TRUSTED_CLIENT_ID: process.env.MARKET_TRUSTED_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0097db5dd776b214 — Environment-variable access.
repo/packages/env/src/app.ts:124 
      AGENT_GATEWAY_SERVICE_TOKEN: process.env.AGENT_GATEWAY_SERVICE_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #355913fcebed1f4d — Environment-variable access.
repo/packages/env/src/app.ts:125 
      ENABLE_AGENT_GATEWAY: process.env.ENABLE_AGENT_GATEWAY === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2427e7194c91b62 — Environment-variable access.
repo/packages/env/src/app.ts:126 
      AGENT_GATEWAY_URL: process.env.AGENT_GATEWAY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b4e3452c8ae4e83b — Environment-variable access.
repo/packages/env/src/app.ts:127 
      enableQueueAgentRuntime: process.env.AGENT_RUNTIME_MODE === 'queue',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f636ff155eabf6a4 — Environment-variable access.
repo/packages/env/src/app.ts:128 
      TELEMETRY_DISABLED: process.env.TELEMETRY_DISABLED === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8039008faf84a197 — Environment-variable access.
repo/packages/env/src/auth.ts:202 
      AUTH_EMAIL_VERIFICATION: process.env.AUTH_EMAIL_VERIFICATION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e2d97ec8f87a03c1 — Environment-variable access.
repo/packages/env/src/auth.ts:203 
      AUTH_ENABLE_MAGIC_LINK: process.env.AUTH_ENABLE_MAGIC_LINK === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b0593339af8033e — Environment-variable access.
repo/packages/env/src/auth.ts:204 
      AUTH_SECRET: process.env.AUTH_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ba7ed439298e7ff — Environment-variable access.
repo/packages/env/src/auth.ts:205 
      AUTH_SSO_PROVIDERS: process.env.AUTH_SSO_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c9185c122e0815e0 — Environment-variable access.
repo/packages/env/src/auth.ts:206 
      AUTH_TRUSTED_ORIGINS: process.env.AUTH_TRUSTED_ORIGINS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a711e49d707d78e8 — Environment-variable access.
repo/packages/env/src/auth.ts:207 
      AUTH_ALLOWED_EMAILS: process.env.AUTH_ALLOWED_EMAILS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d92842d3c96c37f0 — Environment-variable access.
repo/packages/env/src/auth.ts:208 
      AUTH_DISABLE_EMAIL_PASSWORD: process.env.AUTH_DISABLE_EMAIL_PASSWORD === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b31b9032288dbabc — Environment-variable access.
repo/packages/env/src/auth.ts:211 
      AUTH_COGNITO_DOMAIN: process.env.AUTH_COGNITO_DOMAIN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0949e8dfc3e738e — Environment-variable access.
repo/packages/env/src/auth.ts:212 
      AUTH_COGNITO_REGION: process.env.AUTH_COGNITO_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e8edabb672b502fb — Environment-variable access.
repo/packages/env/src/auth.ts:213 
      AUTH_COGNITO_USERPOOL_ID: process.env.AUTH_COGNITO_USERPOOL_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #41bd446d6ad5b006 — Environment-variable access.
repo/packages/env/src/auth.ts:216 
      AUTH_GOOGLE_ID: process.env.AUTH_GOOGLE_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f97bc3bc37338cd — Environment-variable access.
repo/packages/env/src/auth.ts:217 
      AUTH_GOOGLE_SECRET: process.env.AUTH_GOOGLE_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fdfbb4e4782e8808 — Environment-variable access.
repo/packages/env/src/auth.ts:219 
      AUTH_APPLE_CLIENT_ID: process.env.AUTH_APPLE_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c8f2f9c620d1499 — Environment-variable access.
repo/packages/env/src/auth.ts:220 
      AUTH_APPLE_CLIENT_SECRET: process.env.AUTH_APPLE_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c29b98f1804f0d1e — Environment-variable access.
repo/packages/env/src/auth.ts:221 
      AUTH_APPLE_APP_BUNDLE_IDENTIFIER: process.env.AUTH_APPLE_APP_BUNDLE_IDENTIFIER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd999c68f4bfbfd8 — Environment-variable access.
repo/packages/env/src/auth.ts:223 
      AUTH_GITHUB_ID: process.env.AUTH_GITHUB_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ec1a32ccfb2d808 — Environment-variable access.
repo/packages/env/src/auth.ts:224 
      AUTH_GITHUB_SECRET: process.env.AUTH_GITHUB_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6aa80957e6a7fc38 — Environment-variable access.
repo/packages/env/src/auth.ts:226 
      AUTH_MICROSOFT_AUTHORITY_URL: process.env.AUTH_MICROSOFT_AUTHORITY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e49d13cd36acc43d — Environment-variable access.
repo/packages/env/src/auth.ts:227 
      AUTH_MICROSOFT_ID: process.env.AUTH_MICROSOFT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d7ca0654523c429 — Environment-variable access.
repo/packages/env/src/auth.ts:228 
      AUTH_MICROSOFT_SECRET: process.env.AUTH_MICROSOFT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #302c1fab556c395e — Environment-variable access.
repo/packages/env/src/auth.ts:229 
      AUTH_MICROSOFT_TENANT_ID: process.env.AUTH_MICROSOFT_TENANT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a6a652bbc5291cb — Environment-variable access.
repo/packages/env/src/auth.ts:231 
      AUTH_COGNITO_ID: process.env.AUTH_COGNITO_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a740a785e6ad62bb — Environment-variable access.
repo/packages/env/src/auth.ts:232 
      AUTH_COGNITO_SECRET: process.env.AUTH_COGNITO_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a026ca906ec7527 — Environment-variable access.
repo/packages/env/src/auth.ts:233 
      AUTH_COGNITO_ISSUER: process.env.AUTH_COGNITO_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7cae9bb5d3b725eb — Environment-variable access.
repo/packages/env/src/auth.ts:235 
      AUTH_AUTH0_ID: process.env.AUTH_AUTH0_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c7aac90dc86964f — Environment-variable access.
repo/packages/env/src/auth.ts:236 
      AUTH_AUTH0_SECRET: process.env.AUTH_AUTH0_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #162072164f9c94cf — Environment-variable access.
repo/packages/env/src/auth.ts:237 
      AUTH_AUTH0_ISSUER: process.env.AUTH_AUTH0_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b49d8672ac6a706 — Environment-variable access.
repo/packages/env/src/auth.ts:239 
      AUTH_AUTHELIA_ID: process.env.AUTH_AUTHELIA_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aaeb61f2b4000672 — Environment-variable access.
repo/packages/env/src/auth.ts:240 
      AUTH_AUTHELIA_SECRET: process.env.AUTH_AUTHELIA_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f2b91f0c6c0eac4d — Environment-variable access.
repo/packages/env/src/auth.ts:241 
      AUTH_AUTHELIA_ISSUER: process.env.AUTH_AUTHELIA_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78c0493df96891c0 — Environment-variable access.
repo/packages/env/src/auth.ts:243 
      AUTH_AUTHENTIK_ID: process.env.AUTH_AUTHENTIK_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b849a14faa5a6d90 — Environment-variable access.
repo/packages/env/src/auth.ts:244 
      AUTH_AUTHENTIK_SECRET: process.env.AUTH_AUTHENTIK_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5cfa7292e99108d — Environment-variable access.
repo/packages/env/src/auth.ts:245 
      AUTH_AUTHENTIK_ISSUER: process.env.AUTH_AUTHENTIK_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1618dcc4059a36bd — Environment-variable access.
repo/packages/env/src/auth.ts:247 
      AUTH_CASDOOR_ID: process.env.AUTH_CASDOOR_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5720fc4e470fd1a9 — Environment-variable access.
repo/packages/env/src/auth.ts:248 
      AUTH_CASDOOR_SECRET: process.env.AUTH_CASDOOR_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9930aac9fbee0e71 — Environment-variable access.
repo/packages/env/src/auth.ts:249 
      AUTH_CASDOOR_ISSUER: process.env.AUTH_CASDOOR_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62b0b8e1ae156bdc — Environment-variable access.
repo/packages/env/src/auth.ts:251 
      AUTH_CLOUDFLARE_ZERO_TRUST_ID: process.env.AUTH_CLOUDFLARE_ZERO_TRUST_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26b042592c75ab2e — Environment-variable access.
repo/packages/env/src/auth.ts:252 
      AUTH_CLOUDFLARE_ZERO_TRUST_SECRET: process.env.AUTH_CLOUDFLARE_ZERO_TRUST_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f894bd3c0dd7f65 — Environment-variable access.
repo/packages/env/src/auth.ts:253 
      AUTH_CLOUDFLARE_ZERO_TRUST_ISSUER: process.env.AUTH_CLOUDFLARE_ZERO_TRUST_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6ee087d0cc58516 — Environment-variable access.
repo/packages/env/src/auth.ts:255 
      AUTH_FEISHU_APP_ID: process.env.AUTH_FEISHU_APP_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #382b7b15b957b44f — Environment-variable access.
repo/packages/env/src/auth.ts:256 
      AUTH_FEISHU_APP_SECRET: process.env.AUTH_FEISHU_APP_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ee64813aa9df9fd — Environment-variable access.
repo/packages/env/src/auth.ts:258 
      AUTH_GENERIC_OIDC_ID: process.env.AUTH_GENERIC_OIDC_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08e6d0b62ce209c5 — Environment-variable access.
repo/packages/env/src/auth.ts:259 
      AUTH_GENERIC_OIDC_SECRET: process.env.AUTH_GENERIC_OIDC_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee842c17ec90cdb2 — Environment-variable access.
repo/packages/env/src/auth.ts:260 
      AUTH_GENERIC_OIDC_ISSUER: process.env.AUTH_GENERIC_OIDC_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e54fab99e8fd1adf — Environment-variable access.
repo/packages/env/src/auth.ts:262 
      AUTH_KEYCLOAK_ID: process.env.AUTH_KEYCLOAK_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bbc811cce5269a3a — Environment-variable access.
repo/packages/env/src/auth.ts:263 
      AUTH_KEYCLOAK_SECRET: process.env.AUTH_KEYCLOAK_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e43b47e6cf7495c — Environment-variable access.
repo/packages/env/src/auth.ts:264 
      AUTH_KEYCLOAK_ISSUER: process.env.AUTH_KEYCLOAK_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0dd86e6e338be82 — Environment-variable access.
repo/packages/env/src/auth.ts:266 
      AUTH_LOGTO_ID: process.env.AUTH_LOGTO_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af8e5d5b7983cc47 — Environment-variable access.
repo/packages/env/src/auth.ts:267 
      AUTH_LOGTO_SECRET: process.env.AUTH_LOGTO_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd6b682ccc2b7b89 — Environment-variable access.
repo/packages/env/src/auth.ts:268 
      AUTH_LOGTO_ISSUER: process.env.AUTH_LOGTO_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e76178f55865c1e3 — Environment-variable access.
repo/packages/env/src/auth.ts:270 
      AUTH_OKTA_ID: process.env.AUTH_OKTA_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b24884c9f16b9dca — Environment-variable access.
repo/packages/env/src/auth.ts:271 
      AUTH_OKTA_SECRET: process.env.AUTH_OKTA_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c44783679a6fc339 — Environment-variable access.
repo/packages/env/src/auth.ts:272 
      AUTH_OKTA_ISSUER: process.env.AUTH_OKTA_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62f973a772d4fef4 — Environment-variable access.
repo/packages/env/src/auth.ts:274 
      AUTH_WECHAT_ID: process.env.AUTH_WECHAT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #785cd4a95705e65e — Environment-variable access.
repo/packages/env/src/auth.ts:275 
      AUTH_WECHAT_SECRET: process.env.AUTH_WECHAT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30506ae473287eec — Environment-variable access.
repo/packages/env/src/auth.ts:277 
      AUTH_ZITADEL_ID: process.env.AUTH_ZITADEL_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0b5954f9c8325083 — Environment-variable access.
repo/packages/env/src/auth.ts:278 
      AUTH_ZITADEL_SECRET: process.env.AUTH_ZITADEL_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd8a1effb210c09e — Environment-variable access.
repo/packages/env/src/auth.ts:279 
      AUTH_ZITADEL_ISSUER: process.env.AUTH_ZITADEL_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #71290d8b19a78241 — Environment-variable access.
repo/packages/env/src/auth.ts:282 
      LOGTO_WEBHOOK_SIGNING_KEY: process.env.LOGTO_WEBHOOK_SIGNING_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d4d6c5a98b29849e — Environment-variable access.
repo/packages/env/src/auth.ts:285 
      CASDOOR_WEBHOOK_SECRET: process.env.CASDOOR_WEBHOOK_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2abd4110927249ca — Environment-variable access.
repo/packages/env/src/auth.ts:287 
      JWKS_KEY: process.env.JWKS_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #265dbbc9d5734d66 — Environment-variable access.
repo/packages/env/src/auth.ts:288 
      ENABLE_OIDC: !!process.env.JWKS_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17395c99a537601c — Environment-variable access.
repo/packages/env/src/auth.ts:291 
      INTERNAL_JWT_EXPIRATION: process.env.INTERNAL_JWT_EXPIRATION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f5fd87684a2672c — Environment-variable access.
repo/packages/env/src/debug.ts:16 
  DEBUG_MODE: process.env.NEXT_PUBLIC_DEVELOPER_DEBUG === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d60f5d67e55697c — Environment-variable access.
repo/packages/env/src/debug.ts:19 
  I18N_DEBUG: process.env.NEXT_PUBLIC_I18N_DEBUG === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f854bd26a7bbadfa — Environment-variable access.
repo/packages/env/src/debug.ts:20 
  I18N_DEBUG_BROWSER: process.env.NEXT_PUBLIC_I18N_DEBUG_BROWSER === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2477c03f7cedc36e — Environment-variable access.
repo/packages/env/src/debug.ts:21 
  I18N_DEBUG_SERVER: process.env.NEXT_PUBLIC_I18N_DEBUG_SERVER === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3aafda77ac2fd17b — Environment-variable access.
repo/packages/env/src/email.ts:35 
      SMTP_FROM: process.env.SMTP_FROM,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4756a6153d21ba50 — Environment-variable access.
repo/packages/env/src/email.ts:36 
      SMTP_HOST: process.env.SMTP_HOST,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #308edcc67ebe18a4 — Environment-variable access.
repo/packages/env/src/email.ts:37 
      SMTP_PORT: process.env.SMTP_PORT ? Number(process.env.SMTP_PORT) : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75096ed2a4a297a9 — Environment-variable access.
repo/packages/env/src/email.ts:38 
      SMTP_SECURE: process.env.SMTP_SECURE === 'true',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a72cab69a4e6fe7e — Environment-variable access.
repo/packages/env/src/email.ts:39 
      SMTP_USER: process.env.SMTP_USER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8664e2285801a1de — Environment-variable access.
repo/packages/env/src/email.ts:40 
      SMTP_PASS: process.env.SMTP_PASS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e9fcb622480a3a7 — Environment-variable access.
repo/packages/env/src/email.ts:41 
      EMAIL_SERVICE_PROVIDER: process.env.EMAIL_SERVICE_PROVIDER

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #150fbd9e036398f4 — Environment-variable access.
repo/packages/env/src/email.ts:42 
        ? process.env.EMAIL_SERVICE_PROVIDER.toLowerCase()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dee9d4eea5b3fe3b — Environment-variable access.
repo/packages/env/src/email.ts:44 
      RESEND_API_KEY: process.env.RESEND_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a860d08385c2ac3 — Environment-variable access.
repo/packages/env/src/email.ts:45 
      RESEND_FROM: process.env.RESEND_FROM,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #388e565bf4ca4d29 — Environment-variable access.
repo/packages/env/src/file.ts:7 
  if (!!process.env.NEXT_PUBLIC_S3_DOMAIN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa92137e7e259a42 — Environment-variable access.
repo/packages/env/src/file.ts:13 
  const S3_PUBLIC_DOMAIN = process.env.S3_PUBLIC_DOMAIN || process.env.NEXT_PUBLIC_S3_DOMAIN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3814fa3e5dbc293 — Environment-variable access.
repo/packages/env/src/file.ts:25 
      CHUNKS_AUTO_EMBEDDING: process.env.CHUNKS_AUTO_EMBEDDING !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f44ed542aed0ad5 — Environment-variable access.
repo/packages/env/src/file.ts:26 
      CHUNKS_AUTO_GEN_METADATA: process.env.CHUNKS_AUTO_GEN_METADATA !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6538c54190182f08 — Environment-variable access.
repo/packages/env/src/file.ts:27 
      EMBEDDING_BATCH_SIZE: process.env.EMBEDDING_BATCH_SIZE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4a3741a107723be9 — Environment-variable access.
repo/packages/env/src/file.ts:28 
      EMBEDDING_CONCURRENCY: process.env.EMBEDDING_CONCURRENCY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a4aca208e6a3757e — Environment-variable access.
repo/packages/env/src/file.ts:30 
      NEXT_PUBLIC_S3_DOMAIN: process.env.NEXT_PUBLIC_S3_DOMAIN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87c7429c06d3bbde — Environment-variable access.
repo/packages/env/src/file.ts:31 
      NEXT_PUBLIC_S3_FILE_PATH: process.env.NEXT_PUBLIC_S3_FILE_PATH || DEFAULT_S3_FILE_PATH,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8dbadd5bdb637bb8 — Environment-variable access.
repo/packages/env/src/file.ts:33 
      S3_ACCESS_KEY_ID: process.env.S3_ACCESS_KEY_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e6e51f5efc6e70c5 — Environment-variable access.
repo/packages/env/src/file.ts:34 
      S3_BUCKET: process.env.S3_BUCKET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe10e2e5f5c59464 — Environment-variable access.
repo/packages/env/src/file.ts:35 
      S3_ENABLE_PATH_STYLE: process.env.S3_ENABLE_PATH_STYLE === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d6a380a786a95ac — Environment-variable access.
repo/packages/env/src/file.ts:36 
      S3_ENDPOINT: process.env.S3_ENDPOINT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b58e4f87bfd8578b — Environment-variable access.
repo/packages/env/src/file.ts:37 
      S3_PREVIEW_URL_EXPIRE_IN: parseInt(process.env.S3_PREVIEW_URL_EXPIRE_IN || '7200'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5b38ec872dc1ba0 — Environment-variable access.
repo/packages/env/src/file.ts:39 
      S3_REGION: process.env.S3_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #15d81b801412d3dc — Environment-variable access.
repo/packages/env/src/file.ts:40 
      S3_SECRET_ACCESS_KEY: process.env.S3_SECRET_ACCESS_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #47478864299efeb3 — Environment-variable access.
repo/packages/env/src/file.ts:41 
      S3_SET_ACL: process.env.S3_SET_ACL === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1a9b954706418e1 — Environment-variable access.
repo/packages/env/src/gateway.ts:7 
      DEVICE_GATEWAY_SERVICE_TOKEN: process.env.DEVICE_GATEWAY_SERVICE_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bf6df9c993c34823 — Environment-variable access.
repo/packages/env/src/gateway.ts:8 
      DEVICE_GATEWAY_URL: process.env.DEVICE_GATEWAY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e3e76c7e7008bd04 — Environment-variable access.
repo/packages/env/src/gateway.ts:9 
      MESSAGE_GATEWAY_ENABLED: process.env.MESSAGE_GATEWAY_ENABLED,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c8705114311f7e75 — Environment-variable access.
repo/packages/env/src/gateway.ts:10 
      MESSAGE_GATEWAY_SERVICE_TOKEN: process.env.MESSAGE_GATEWAY_SERVICE_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #452cb834e4b34cae — Environment-variable access.
repo/packages/env/src/gateway.ts:11 
      MESSAGE_GATEWAY_URL: process.env.MESSAGE_GATEWAY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c90dd0caa894734 — Environment-variable access.
repo/packages/env/src/image.ts:9 
      AI_IMAGE_DEFAULT_IMAGE_NUM: process.env.AI_IMAGE_DEFAULT_IMAGE_NUM,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #252c11d9b46175c6 — Environment-variable access.
repo/packages/env/src/knowledge.ts:6 
    DEFAULT_FILES_CONFIG: process.env.DEFAULT_FILES_CONFIG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e52c5125b81e6cd — Environment-variable access.
repo/packages/env/src/knowledge.ts:7 
    FILE_TYPE_CHUNKING_RULES: process.env.FILE_TYPE_CHUNKING_RULES,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1fdd226ec2f8054a — Environment-variable access.
repo/packages/env/src/knowledge.ts:8 
    UNSTRUCTURED_API_KEY: process.env.UNSTRUCTURED_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #852ac133e6b401ac — Environment-variable access.
repo/packages/env/src/knowledge.ts:9 
    UNSTRUCTURED_SERVER_URL: process.env.UNSTRUCTURED_SERVER_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d03d9cd80b02c2f — Environment-variable access.
repo/packages/env/src/langfuse.ts:7 
      ENABLE_LANGFUSE: process.env.ENABLE_LANGFUSE === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #df6e7335cb3a0eaa — Environment-variable access.
repo/packages/env/src/langfuse.ts:8 
      LANGFUSE_SECRET_KEY: process.env.LANGFUSE_SECRET_KEY || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b67e9b8a8d07416 — Environment-variable access.
repo/packages/env/src/langfuse.ts:9 
      LANGFUSE_PUBLIC_KEY: process.env.LANGFUSE_PUBLIC_KEY || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f5bfe0767e939077 — Environment-variable access.
repo/packages/env/src/langfuse.ts:10 
      LANGFUSE_HOST: process.env.LANGFUSE_HOST || 'https://cloud.langfuse.com',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89a32cc7bb862fd7 — Environment-variable access.
repo/packages/env/src/llm.ts:260 
      API_KEY_SELECT_MODE: process.env.API_KEY_SELECT_MODE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1757a149e7230604 — Environment-variable access.
repo/packages/env/src/llm.ts:262 
      ENABLED_OPENAI: process.env.ENABLED_OPENAI !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3241208a4f2c551 — Environment-variable access.
repo/packages/env/src/llm.ts:263 
      OPENAI_API_KEY: process.env.OPENAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #00ea274b53dc3371 — Environment-variable access.
repo/packages/env/src/llm.ts:265 
      ENABLED_AZURE_OPENAI: !!process.env.AZURE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b641d8dc33d556c — Environment-variable access.
repo/packages/env/src/llm.ts:266 
      AZURE_API_KEY: process.env.AZURE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #47f744da2b1b1289 — Environment-variable access.
repo/packages/env/src/llm.ts:267 
      AZURE_API_VERSION: process.env.AZURE_API_VERSION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5b0e4893d8493c3 — Environment-variable access.
repo/packages/env/src/llm.ts:268 
      AZURE_ENDPOINT: process.env.AZURE_ENDPOINT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0985c0aec6d29e8 — Environment-variable access.
repo/packages/env/src/llm.ts:270 
      ENABLED_AZUREAI: !!process.env.AZUREAI_ENDPOINT_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #232667e078077989 — Environment-variable access.
repo/packages/env/src/llm.ts:271 
      AZUREAI_ENDPOINT_KEY: process.env.AZUREAI_ENDPOINT_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8a566bbf3e5632f — Environment-variable access.
repo/packages/env/src/llm.ts:272 
      AZUREAI_ENDPOINT: process.env.AZUREAI_ENDPOINT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #721e325792ecb4b2 — Environment-variable access.
repo/packages/env/src/llm.ts:274 
      ENABLED_ZHIPU: !!process.env.ZHIPU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43dc0387091262a1 — Environment-variable access.
repo/packages/env/src/llm.ts:275 
      ZHIPU_API_KEY: process.env.ZHIPU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c2a602ad4d02db0 — Environment-variable access.
repo/packages/env/src/llm.ts:277 
      ENABLED_DEEPSEEK: !!process.env.DEEPSEEK_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c619c9a581b5a5c7 — Environment-variable access.
repo/packages/env/src/llm.ts:278 
      DEEPSEEK_API_KEY: process.env.DEEPSEEK_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #64290ff62f7636f0 — Environment-variable access.
repo/packages/env/src/llm.ts:280 
      ENABLED_GOOGLE: process.env.ENABLED_GOOGLE !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c02ced747134d529 — Environment-variable access.
repo/packages/env/src/llm.ts:281 
      GOOGLE_API_KEY: process.env.GOOGLE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #785fc61c10decabc — Environment-variable access.
repo/packages/env/src/llm.ts:283 
      ENABLED_VERTEXAI: !!process.env.VERTEXAI_CREDENTIALS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d019f89dd5caa68a — Environment-variable access.
repo/packages/env/src/llm.ts:285 
      ENABLED_VOLCENGINE: !!process.env.VOLCENGINE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f17f726e3df3cf7 — Environment-variable access.
repo/packages/env/src/llm.ts:286 
      VOLCENGINE_API_KEY: process.env.VOLCENGINE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b20b16b7bc5c21df — Environment-variable access.
repo/packages/env/src/llm.ts:288 
      ENABLED_PERPLEXITY: !!process.env.PERPLEXITY_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c335b78e344bed4a — Environment-variable access.
repo/packages/env/src/llm.ts:289 
      PERPLEXITY_API_KEY: process.env.PERPLEXITY_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fbe0d0aa73cbf64e — Environment-variable access.
repo/packages/env/src/llm.ts:291 
      ENABLED_ANTHROPIC: process.env.ENABLED_ANTHROPIC !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb931975a07b257e — Environment-variable access.
repo/packages/env/src/llm.ts:292 
      ANTHROPIC_API_KEY: process.env.ANTHROPIC_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5b8dfea0357461d — Environment-variable access.
repo/packages/env/src/llm.ts:294 
      ENABLED_MINIMAX: !!process.env.MINIMAX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0aedd7452e494b00 — Environment-variable access.
repo/packages/env/src/llm.ts:295 
      MINIMAX_API_KEY: process.env.MINIMAX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83eb9c685028d5bf — Environment-variable access.
repo/packages/env/src/llm.ts:297 
      ENABLED_MISTRAL: !!process.env.MISTRAL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #afc4aa433dd649e0 — Environment-variable access.
repo/packages/env/src/llm.ts:298 
      MISTRAL_API_KEY: process.env.MISTRAL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9fa663008e56393a — Environment-variable access.
repo/packages/env/src/llm.ts:300 
      ENABLED_OPENROUTER: !!process.env.OPENROUTER_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae9c37243c2d3713 — Environment-variable access.
repo/packages/env/src/llm.ts:301 
      OPENROUTER_API_KEY: process.env.OPENROUTER_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0792bca8db1308a8 — Environment-variable access.
repo/packages/env/src/llm.ts:303 
      ENABLED_TOGETHERAI: !!process.env.TOGETHERAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3b810ecc57253be — Environment-variable access.
repo/packages/env/src/llm.ts:304 
      TOGETHERAI_API_KEY: process.env.TOGETHERAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c6ba4caed357704a — Environment-variable access.
repo/packages/env/src/llm.ts:306 
      ENABLED_FIREWORKSAI: !!process.env.FIREWORKSAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #011ae93ff41bf51e — Environment-variable access.
repo/packages/env/src/llm.ts:307 
      FIREWORKSAI_API_KEY: process.env.FIREWORKSAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #847e2d40e33e3da7 — Environment-variable access.
repo/packages/env/src/llm.ts:309 
      ENABLED_MOONSHOT: !!process.env.MOONSHOT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7191a02047f5d8f7 — Environment-variable access.
repo/packages/env/src/llm.ts:310 
      MOONSHOT_API_KEY: process.env.MOONSHOT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d1bdb1d35ac4a2a — Environment-variable access.
repo/packages/env/src/llm.ts:312 
      ENABLED_KIMICODINGPLAN: !!process.env.KIMICODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cbf81be71ecc3f92 — Environment-variable access.
repo/packages/env/src/llm.ts:313 
      KIMICODINGPLAN_API_KEY: process.env.KIMICODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eafb89741a5480d7 — Environment-variable access.
repo/packages/env/src/llm.ts:315 
      ENABLED_BAILIANCODINGPLAN: !!process.env.BAILIANCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8482345f2371fd32 — Environment-variable access.
repo/packages/env/src/llm.ts:316 
      BAILIANCODINGPLAN_API_KEY: process.env.BAILIANCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c0e2e4a10f41e02 — Environment-variable access.
repo/packages/env/src/llm.ts:318 
      ENABLED_GLMCODINGPLAN: !!process.env.GLMCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba95853ba0efc28f — Environment-variable access.
repo/packages/env/src/llm.ts:319 
      GLMCODINGPLAN_API_KEY: process.env.GLMCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3dcf01edaffbcd6e — Environment-variable access.
repo/packages/env/src/llm.ts:321 
      ENABLED_MINIMAXCODINGPLAN: !!process.env.MINIMAXCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #00a7269741676893 — Environment-variable access.
repo/packages/env/src/llm.ts:322 
      MINIMAXCODINGPLAN_API_KEY: process.env.MINIMAXCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3712013ca920cf0d — Environment-variable access.
repo/packages/env/src/llm.ts:324 
      ENABLED_VOLCENGINECODINGPLAN: !!process.env.VOLCENGINECODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f3c2fb036a59ef7 — Environment-variable access.
repo/packages/env/src/llm.ts:325 
      VOLCENGINECODINGPLAN_API_KEY: process.env.VOLCENGINECODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad215c0116c35867 — Environment-variable access.
repo/packages/env/src/llm.ts:327 
      ENABLED_GROQ: !!process.env.GROQ_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05c4597234df7b5a — Environment-variable access.
repo/packages/env/src/llm.ts:328 
      GROQ_API_KEY: process.env.GROQ_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ccca217508b187f — Environment-variable access.
repo/packages/env/src/llm.ts:330 
      ENABLED_GITHUB: !!process.env.GITHUB_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0e8b12d53c46ee7 — Environment-variable access.
repo/packages/env/src/llm.ts:331 
      GITHUB_TOKEN: process.env.GITHUB_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea1f34ce4ff54496 — Environment-variable access.
repo/packages/env/src/llm.ts:333 
      ENABLED_ZEROONE: !!process.env.ZEROONE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56f7e411e5943eb8 — Environment-variable access.
repo/packages/env/src/llm.ts:334 
      ZEROONE_API_KEY: process.env.ZEROONE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b27b818d2e75df4 — Environment-variable access.
repo/packages/env/src/llm.ts:336 
      ENABLED_AWS_BEDROCK: process.env.ENABLED_AWS_BEDROCK === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #96e26f7908e75de8 — Environment-variable access.
repo/packages/env/src/llm.ts:337 
      AWS_REGION: process.env.AWS_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5aa71ead2de0a773 — Environment-variable access.
repo/packages/env/src/llm.ts:338 
      AWS_ACCESS_KEY_ID: process.env.AWS_ACCESS_KEY_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1fc749791a19c168 — Environment-variable access.
repo/packages/env/src/llm.ts:339 
      AWS_SECRET_ACCESS_KEY: process.env.AWS_SECRET_ACCESS_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a62fa78731e7d0b3 — Environment-variable access.
repo/packages/env/src/llm.ts:340 
      AWS_SESSION_TOKEN: process.env.AWS_SESSION_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81c3f0a2ed553a3d — Environment-variable access.
repo/packages/env/src/llm.ts:342 
      ENABLED_WENXIN: !!process.env.WENXIN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1aae011f670a52ab — Environment-variable access.
repo/packages/env/src/llm.ts:343 
      WENXIN_API_KEY: process.env.WENXIN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #160cbc0cd511f154 — Environment-variable access.
repo/packages/env/src/llm.ts:345 
      ENABLED_OLLAMA: process.env.ENABLED_OLLAMA !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b85a5df4ec6c1d56 — Environment-variable access.
repo/packages/env/src/llm.ts:346 
      ENABLED_OLLAMA_CLOUD: !!process.env.OLLAMA_CLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #21106c15faf8877b — Environment-variable access.
repo/packages/env/src/llm.ts:347 
      OLLAMA_CLOUD_API_KEY: process.env.OLLAMA_CLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #846eba69b97c7a06 — Environment-variable access.
repo/packages/env/src/llm.ts:349 
      ENABLED_VLLM: !!process.env.VLLM_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c403b36b47146609 — Environment-variable access.
repo/packages/env/src/llm.ts:350 
      VLLM_API_KEY: process.env.VLLM_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #25dcfa45bfb0fbd2 — Environment-variable access.
repo/packages/env/src/llm.ts:352 
      ENABLED_XINFERENCE: !!process.env.XINFERENCE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a17b9963636e90e4 — Environment-variable access.
repo/packages/env/src/llm.ts:353 
      XINFERENCE_API_KEY: process.env.XINFERENCE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e462f0397e645ad7 — Environment-variable access.
repo/packages/env/src/llm.ts:355 
      ENABLED_LMSTUDIO: !!process.env.LMSTUDIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #899c7f43ad3a5ead — Environment-variable access.
repo/packages/env/src/llm.ts:356 
      LMSTUDIO_API_KEY: process.env.LMSTUDIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a38501275f47f285 — Environment-variable access.
repo/packages/env/src/llm.ts:358 
      ENABLED_QINIU: !!process.env.QINIU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #51df0b09b13a3b24 — Environment-variable access.
repo/packages/env/src/llm.ts:359 
      QINIU_API_KEY: process.env.QINIU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d1a995cd2ebaed47 — Environment-variable access.
repo/packages/env/src/llm.ts:361 
      ENABLED_QWEN: !!process.env.QWEN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de080bdc83fa8cff — Environment-variable access.
repo/packages/env/src/llm.ts:362 
      QWEN_API_KEY: process.env.QWEN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9202fe75c78b5f02 — Environment-variable access.
repo/packages/env/src/llm.ts:364 
      ENABLED_STEPFUN: !!process.env.STEPFUN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4bbc822083a2b53a — Environment-variable access.
repo/packages/env/src/llm.ts:365 
      STEPFUN_API_KEY: process.env.STEPFUN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #72b6c38047b78082 — Environment-variable access.
repo/packages/env/src/llm.ts:367 
      ENABLED_NOVITA: !!process.env.NOVITA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c245daebbc1979c — Environment-variable access.
repo/packages/env/src/llm.ts:368 
      NOVITA_API_KEY: process.env.NOVITA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c14f1d737bc20a32 — Environment-variable access.
repo/packages/env/src/llm.ts:370 
      ENABLED_NVIDIA: !!process.env.NVIDIA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc2d1c60b47640c2 — Environment-variable access.
repo/packages/env/src/llm.ts:371 
      NVIDIA_API_KEY: process.env.NVIDIA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b1328ea67416e5b5 — Environment-variable access.
repo/packages/env/src/llm.ts:373 
      ENABLED_BAICHUAN: !!process.env.BAICHUAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2a95b3bb64fd3eb3 — Environment-variable access.
repo/packages/env/src/llm.ts:374 
      BAICHUAN_API_KEY: process.env.BAICHUAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e5bc878b9c06517 — Environment-variable access.
repo/packages/env/src/llm.ts:376 
      ENABLED_TAICHU: !!process.env.TAICHU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d992a101b425283c — Environment-variable access.
repo/packages/env/src/llm.ts:377 
      TAICHU_API_KEY: process.env.TAICHU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b4d680958bccd614 — Environment-variable access.
repo/packages/env/src/llm.ts:380 
        !!process.env.CLOUDFLARE_API_KEY && !!process.env.CLOUDFLARE_BASE_URL_OR_ACCOUNT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7777d557e0040f8b — Environment-variable access.
repo/packages/env/src/llm.ts:381 
      CLOUDFLARE_API_KEY: process.env.CLOUDFLARE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b7e4dfaf85a5e3d4 — Environment-variable access.
repo/packages/env/src/llm.ts:382 
      CLOUDFLARE_BASE_URL_OR_ACCOUNT_ID: process.env.CLOUDFLARE_BASE_URL_OR_ACCOUNT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b42db48b2404c80 — Environment-variable access.
repo/packages/env/src/llm.ts:384 
      ENABLED_AI360: !!process.env.AI360_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b4a06e29e5c23a55 — Environment-variable access.
repo/packages/env/src/llm.ts:385 
      AI360_API_KEY: process.env.AI360_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #66e4866e4cd21784 — Environment-variable access.
repo/packages/env/src/llm.ts:387 
      ENABLED_SILICONCLOUD: !!process.env.SILICONCLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e25ea4ef1e71baea — Environment-variable access.
repo/packages/env/src/llm.ts:388 
      SILICONCLOUD_API_KEY: process.env.SILICONCLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c108ad883212b9e — Environment-variable access.
repo/packages/env/src/llm.ts:390 
      ENABLED_GITEE_AI: !!process.env.GITEE_AI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #06aa6e66aebe58cb — Environment-variable access.
repo/packages/env/src/llm.ts:391 
      GITEE_AI_API_KEY: process.env.GITEE_AI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c5209738ea7abdc — Environment-variable access.
repo/packages/env/src/llm.ts:393 
      ENABLED_UPSTAGE: !!process.env.UPSTAGE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8adf72ca76e3e69 — Environment-variable access.
repo/packages/env/src/llm.ts:394 
      UPSTAGE_API_KEY: process.env.UPSTAGE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #836a42a262cb8062 — Environment-variable access.
repo/packages/env/src/llm.ts:396 
      ENABLED_SPARK: !!process.env.SPARK_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #64e43bd2d7c2ecf3 — Environment-variable access.
repo/packages/env/src/llm.ts:397 
      SPARK_API_KEY: process.env.SPARK_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e8cc6fd6f45d910c — Environment-variable access.
repo/packages/env/src/llm.ts:399 
      ENABLED_AI21: !!process.env.AI21_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3ce84f5ced8e84b5 — Environment-variable access.
repo/packages/env/src/llm.ts:400 
      AI21_API_KEY: process.env.AI21_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe7b58cffa1b4956 — Environment-variable access.
repo/packages/env/src/llm.ts:402 
      ENABLED_HUNYUAN: !!process.env.HUNYUAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c56e99edffb9b058 — Environment-variable access.
repo/packages/env/src/llm.ts:403 
      HUNYUAN_API_KEY: process.env.HUNYUAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad6394869156619b — Environment-variable access.
repo/packages/env/src/llm.ts:405 
      ENABLED_HUGGINGFACE: !!process.env.HUGGINGFACE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d26e19303041c66 — Environment-variable access.
repo/packages/env/src/llm.ts:406 
      HUGGINGFACE_API_KEY: process.env.HUGGINGFACE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f158300a8f51c0b6 — Environment-variable access.
repo/packages/env/src/llm.ts:408 
      ENABLED_SENSENOVA: !!process.env.SENSENOVA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37a075dc64ac6ff1 — Environment-variable access.
repo/packages/env/src/llm.ts:409 
      SENSENOVA_API_KEY: process.env.SENSENOVA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c6871994b0ad872 — Environment-variable access.
repo/packages/env/src/llm.ts:411 
      ENABLED_XAI: !!process.env.XAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46bfadac955ddbf3 — Environment-variable access.
repo/packages/env/src/llm.ts:412 
      XAI_API_KEY: process.env.XAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2947bf938b98181 — Environment-variable access.
repo/packages/env/src/llm.ts:414 
      ENABLED_INTERNLM: !!process.env.INTERNLM_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be7184c04aa87938 — Environment-variable access.
repo/packages/env/src/llm.ts:415 
      INTERNLM_API_KEY: process.env.INTERNLM_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #55ca16a141386f99 — Environment-variable access.
repo/packages/env/src/llm.ts:417 
      ENABLED_HIGRESS: !!process.env.HIGRESS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #768e1ec6cc1e278f — Environment-variable access.
repo/packages/env/src/llm.ts:418 
      HIGRESS_API_KEY: process.env.HIGRESS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef9aaa491d6fc259 — Environment-variable access.
repo/packages/env/src/llm.ts:420 
      ENABLED_TENCENT_CLOUD: !!process.env.TENCENT_CLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d1f6811cc2e8a87 — Environment-variable access.
repo/packages/env/src/llm.ts:421 
      TENCENT_CLOUD_API_KEY: process.env.TENCENT_CLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #870d24852b7e562d — Environment-variable access.
repo/packages/env/src/llm.ts:423 
      ENABLED_JINA: !!process.env.JINA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f7521ef3028c3e59 — Environment-variable access.
repo/packages/env/src/llm.ts:424 
      JINA_API_KEY: process.env.JINA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #352868273dad7d46 — Environment-variable access.
repo/packages/env/src/llm.ts:426 
      ENABLED_SAMBANOVA: !!process.env.SAMBANOVA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #540ff0c8bb886a05 — Environment-variable access.
repo/packages/env/src/llm.ts:427 
      SAMBANOVA_API_KEY: process.env.SAMBANOVA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #016f5f968312d194 — Environment-variable access.
repo/packages/env/src/llm.ts:429 
      ENABLED_PPIO: !!process.env.PPIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cfd4911a444e8123 — Environment-variable access.
repo/packages/env/src/llm.ts:430 
      PPIO_API_KEY: process.env.PPIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #716c9b297ce53860 — Environment-variable access.
repo/packages/env/src/llm.ts:432 
      ENABLED_SEARCH1API: !!process.env.SEARCH1API_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2d51795d2069b98 — Environment-variable access.
repo/packages/env/src/llm.ts:433 
      SEARCH1API_API_KEY: process.env.SEARCH1API_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc2b4809fbbaa753 — Environment-variable access.
repo/packages/env/src/llm.ts:435 
      ENABLED_COHERE: !!process.env.COHERE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ccc10fdb609b99e2 — Environment-variable access.
repo/packages/env/src/llm.ts:436 
      COHERE_API_KEY: process.env.COHERE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83c36f7999e2d167 — Environment-variable access.
repo/packages/env/src/llm.ts:438 
      ENABLED_INFINIAI: !!process.env.INFINIAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a08eab1950f9b05 — Environment-variable access.
repo/packages/env/src/llm.ts:439 
      INFINIAI_API_KEY: process.env.INFINIAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b2b42faa946f9bc — Environment-variable access.
repo/packages/env/src/llm.ts:441 
      ENABLED_FAL: process.env.ENABLED_FAL !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a42464d707b0dff2 — Environment-variable access.
repo/packages/env/src/llm.ts:442 
      FAL_API_KEY: process.env.FAL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce736b49458d3240 — Environment-variable access.
repo/packages/env/src/llm.ts:444 
      ENABLED_BFL: !!process.env.BFL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #44771f3fb52bae96 — Environment-variable access.
repo/packages/env/src/llm.ts:445 
      BFL_API_KEY: process.env.BFL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5a032c2007625ea — Environment-variable access.
repo/packages/env/src/llm.ts:447 
      ENABLED_COMFYUI: process.env.ENABLED_COMFYUI !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #73eee8721e512a5a — Environment-variable access.
repo/packages/env/src/llm.ts:448 
      COMFYUI_BASE_URL: process.env.COMFYUI_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #458417f6f9842358 — Environment-variable access.
repo/packages/env/src/llm.ts:449 
      COMFYUI_AUTH_TYPE: process.env.COMFYUI_AUTH_TYPE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8edf554137dcc115 — Environment-variable access.
repo/packages/env/src/llm.ts:450 
      COMFYUI_API_KEY: process.env.COMFYUI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83051ab382a5d07f — Environment-variable access.
repo/packages/env/src/llm.ts:451 
      COMFYUI_USERNAME: process.env.COMFYUI_USERNAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac7246824ed9366e — Environment-variable access.
repo/packages/env/src/llm.ts:452 
      COMFYUI_PASSWORD: process.env.COMFYUI_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e962e1542b25764d — Environment-variable access.
repo/packages/env/src/llm.ts:453 
      COMFYUI_CUSTOM_HEADERS: process.env.COMFYUI_CUSTOM_HEADERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #67c444f6933b99d3 — Environment-variable access.
repo/packages/env/src/llm.ts:455 
      ENABLED_MODELSCOPE: !!process.env.MODELSCOPE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e4733cc2f9ea1039 — Environment-variable access.
repo/packages/env/src/llm.ts:456 
      MODELSCOPE_API_KEY: process.env.MODELSCOPE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ff54d7b0d79a909 — Environment-variable access.
repo/packages/env/src/llm.ts:458 
      ENABLED_V0: !!process.env.V0_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ede756f2e323c15f — Environment-variable access.
repo/packages/env/src/llm.ts:459 
      V0_API_KEY: process.env.V0_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4b024b37bc96a5fa — Environment-variable access.
repo/packages/env/src/llm.ts:461 
      ENABLED_VERCELAIGATEWAY: !!process.env.VERCELAIGATEWAY_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e39a5aca82340e2b — Environment-variable access.
repo/packages/env/src/llm.ts:462 
      VERCELAIGATEWAY_API_KEY: process.env.VERCELAIGATEWAY_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #104cc9b5bf1023bc — Environment-variable access.
repo/packages/env/src/llm.ts:464 
      ENABLED_AI302: !!process.env.AI302_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c9bdf236b64a563d — Environment-variable access.
repo/packages/env/src/llm.ts:465 
      AI302_API_KEY: process.env.AI302_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf602b4b7e380e91 — Environment-variable access.
repo/packages/env/src/llm.ts:467 
      ENABLED_AKASHCHAT: !!process.env.AKASHCHAT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0b7c572d6f866c7 — Environment-variable access.
repo/packages/env/src/llm.ts:468 
      AKASHCHAT_API_KEY: process.env.AKASHCHAT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e49fb2e4f960e0f1 — Environment-variable access.
repo/packages/env/src/llm.ts:470 
      ENABLED_COMETAPI: !!process.env.COMETAPI_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d70bc4099e1ea6ad — Environment-variable access.
repo/packages/env/src/llm.ts:471 
      COMETAPI_KEY: process.env.COMETAPI_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #95c4eb0b48d15882 — Environment-variable access.
repo/packages/env/src/llm.ts:473 
      ENABLED_AIHUBMIX: !!process.env.AIHUBMIX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7be35db69a2ec59 — Environment-variable access.
repo/packages/env/src/llm.ts:474 
      AIHUBMIX_API_KEY: process.env.AIHUBMIX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #396872d9cbe2b77f — Environment-variable access.
repo/packages/env/src/llm.ts:475 
      AIHUBMIX_PROXY_URL: process.env.AIHUBMIX_PROXY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c781c1fd2f12d448 — Environment-variable access.
repo/packages/env/src/llm.ts:477 
      ENABLED_NEWAPI: !!process.env.NEWAPI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f722ffac3163ac12 — Environment-variable access.
repo/packages/env/src/llm.ts:478 
      NEWAPI_API_KEY: process.env.NEWAPI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #10d4171847c51b82 — Environment-variable access.
repo/packages/env/src/llm.ts:479 
      NEWAPI_PROXY_URL: process.env.NEWAPI_PROXY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d2a490e2a48148f — Environment-variable access.
repo/packages/env/src/llm.ts:481 
      ENABLED_NEBIUS: !!process.env.NEBIUS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52fac76fae6b63b0 — Environment-variable access.
repo/packages/env/src/llm.ts:482 
      NEBIUS_API_KEY: process.env.NEBIUS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c1c9a972c1c165a — Environment-variable access.
repo/packages/env/src/llm.ts:484 
      ENABLED_CEREBRAS: !!process.env.CEREBRAS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b9cfe958bbadffbe — Environment-variable access.
repo/packages/env/src/llm.ts:485 
      CEREBRAS_API_KEY: process.env.CEREBRAS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf6e3d80f99c5754 — Environment-variable access.
repo/packages/env/src/llm.ts:487 
      ENABLED_ZENMUX: !!process.env.ZENMUX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #71c2b5ca01950af4 — Environment-variable access.
repo/packages/env/src/llm.ts:488 
      ZENMUX_API_KEY: process.env.ZENMUX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26597ff5f1e360e4 — Environment-variable access.
repo/packages/env/src/llm.ts:490 
      ENABLED_STRAICO: !!process.env.STRAICO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48fc4e425a2b676a — Environment-variable access.
repo/packages/env/src/llm.ts:491 
      STRAICO_API_KEY: process.env.STRAICO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e0c53472b9af293 — Environment-variable access.
repo/packages/env/src/llm.ts:493 
      ENABLED_LOBEHUB: !!process.env.ENABLED_LOBEHUB,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c02d2ccb2063b8bb — Environment-variable access.
repo/packages/env/src/llm.ts:495 
      ENABLED_OPENCODEZEN: !!process.env.OPENCODEZEN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0fb0882e63f994b4 — Environment-variable access.
repo/packages/env/src/llm.ts:496 
      OPENCODEZEN_API_KEY: process.env.OPENCODEZEN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d545b23e464fb21 — Environment-variable access.
repo/packages/env/src/llm.ts:498 
      ENABLED_OPENCODECODINGPLAN: !!process.env.OPENCODECODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #12f0da610b03744d — Environment-variable access.
repo/packages/env/src/llm.ts:499 
      OPENCODECODINGPLAN_API_KEY: process.env.OPENCODECODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4860a1a5720a6469 — Environment-variable access.
repo/packages/env/src/llm.ts:501 
      ENABLED_XIAOMIMIMO: !!process.env.XIAOMIMIMO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b1f506e0f1795213 — Environment-variable access.
repo/packages/env/src/llm.ts:502 
      XIAOMIMIMO_API_KEY: process.env.XIAOMIMIMO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af53571268a4fd31 — Environment-variable access.
repo/packages/env/src/llm.ts:504 
      ENABLED_LONGCAT: !!process.env.LONGCAT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36f58327afab76b0 — Environment-variable access.
repo/packages/env/src/llm.ts:505 
      LONGCAT_API_KEY: process.env.LONGCAT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #65176ce8276af2fb — Environment-variable access.
repo/packages/env/src/llm.ts:507 
      ENABLED_STREAMLAKE: !!process.env.STREAMLAKE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f5cc231dea64485b — Environment-variable access.
repo/packages/env/src/llm.ts:508 
      STREAMLAKE_API_KEY: process.env.STREAMLAKE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d90803c193e3c6fc — Environment-variable access.
repo/packages/env/src/llm.ts:510 
      ENABLED_ANTGROUP: !!process.env.ANTGROUP_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #12c4ae16e7e0d293 — Environment-variable access.
repo/packages/env/src/llm.ts:511 
      ANTGROUP_API_KEY: process.env.ANTGROUP_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5831ed350496b63 — Environment-variable access.
repo/packages/env/src/python.ts:12 
      NEXT_PUBLIC_PYODIDE_INDEX_URL: process.env.NEXT_PUBLIC_PYODIDE_INDEX_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #210852df0bf66d2d — Environment-variable access.
repo/packages/env/src/python.ts:13 
      NEXT_PUBLIC_PYODIDE_PIP_INDEX_URL: process.env.NEXT_PUBLIC_PYODIDE_PIP_INDEX_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bfb097eb6af7b0dd — Environment-variable access.
repo/packages/env/src/redis.ts:23 
      REDIS_DATABASE: parseNumber(process.env.REDIS_DATABASE),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #710909a0583476a2 — Environment-variable access.
repo/packages/env/src/redis.ts:24 
      REDIS_PASSWORD: process.env.REDIS_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1eb1358e10c050af — Environment-variable access.
repo/packages/env/src/redis.ts:25 
      REDIS_PREFIX: process.env.REDIS_PREFIX || 'lobechat',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #254df334a5cb6a8d — Environment-variable access.
repo/packages/env/src/redis.ts:26 
      REDIS_TLS: parseRedisTls(process.env.REDIS_TLS),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bf2805049fc4b588 — Environment-variable access.
repo/packages/env/src/redis.ts:27 
      REDIS_URL: process.env.REDIS_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1e92505cb5a4f84f — Environment-variable access.
repo/packages/env/src/redis.ts:28 
      REDIS_USERNAME: process.env.REDIS_USERNAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #21a477a54f515368 — Environment-variable access.
repo/packages/env/src/sandbox.ts:9 
      ONLYBOXES_BASE_URL: process.env.ONLYBOXES_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e1512c9ec604a13 — Environment-variable access.
repo/packages/env/src/sandbox.ts:10 
      ONLYBOXES_JIT_ISSUER: process.env.ONLYBOXES_JIT_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b085aa46fcba87a — Environment-variable access.
repo/packages/env/src/sandbox.ts:11 
      ONLYBOXES_JIT_SIGNING_KEY: process.env.ONLYBOXES_JIT_SIGNING_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #66b989afcb417462 — Environment-variable access.
repo/packages/env/src/sandbox.ts:12 
      ONLYBOXES_JIT_TTL_SEC: process.env.ONLYBOXES_JIT_TTL_SEC,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae85aa0bf81205d3 — Environment-variable access.
repo/packages/env/src/sandbox.ts:13 
      ONLYBOXES_LEASE_TTL_SEC: process.env.ONLYBOXES_LEASE_TTL_SEC,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee875593e03619a1 — Environment-variable access.
repo/packages/env/src/sandbox.ts:14 
      SANDBOX_PROVIDER: process.env.SANDBOX_PROVIDER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #084616201f1176a7 — Environment-variable access.
repo/packages/env/src/tools.ts:13 
      CRAWL_CONCURRENCY: process.env.CRAWL_CONCURRENCY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #daa5d38ee59dc0a4 — Environment-variable access.
repo/packages/env/src/tools.ts:14 
      CRAWLER_RETRY: process.env.CRAWLER_RETRY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3c2f53d59641a813 — Environment-variable access.
repo/packages/env/src/tools.ts:15 
      CRAWLER_IMPLS: process.env.CRAWLER_IMPLS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d11c3d6b21614b2e — Environment-variable access.
repo/packages/env/src/tools.ts:16 
      JINA_USE_CN_DOMAINS: process.env.JINA_USE_CN_DOMAINS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba5d05e67f0c7e75 — Environment-variable access.
repo/packages/env/src/tools.ts:17 
      SEARCH_PROVIDERS: process.env.SEARCH_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a3ca780f5685113e — Environment-variable access.
repo/packages/env/src/tools.ts:18 
      SEARXNG_URL: process.env.SEARXNG_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #67f581aab2ce03a2 — Environment-variable access.
repo/packages/env/src/tools.ts:19 
      VISUAL_UNDERSTANDING_MODEL: process.env.VISUAL_UNDERSTANDING_MODEL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9a519c48d6759c9 — Environment-variable access.
repo/packages/env/src/tools.ts:20 
      VISUAL_UNDERSTANDING_PROVIDER: process.env.VISUAL_UNDERSTANDING_PROVIDER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/eval-dataset-parser

npm first-party
expand_more 6 low-confidence finding(s)
low env_fs test-only #7a69531010de454c — Filesystem access.
repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:11 
  const csv = readFileSync(resolve(fixtures, 'sample.csv'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #853696d7cf0d2dbf — Filesystem access.
repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:29 
  const jsonl = readFileSync(resolve(fixtures, 'sample.jsonl'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0917286675b488c2 — Filesystem access.
repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:50 
  const json = readFileSync(resolve(fixtures, 'sample.json'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f8eeb78f49b67f06 — Filesystem access.
repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:68 
    const csv = readFileSync(resolve(fixtures, 'sample.csv'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0ac70fe50469297a — Filesystem access.
repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:75 
    const jsonl = readFileSync(resolve(fixtures, 'sample.jsonl'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #212d83b6607ba18b — Filesystem access.
repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:81 
    const json = readFileSync(resolve(fixtures, 'sample.json'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/file-loaders

npm first-party
expand_more 7 low-confidence finding(s)
low env_fs production #d17dd9660ef71e7b — Filesystem access.
repo/packages/file-loaders/src/loadFile.test.ts:49 
      await writeFile(file, Buffer.from([80, 75, 3, 4, 0, 0]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2253d6fa4b396ba6 — Filesystem access.
repo/packages/file-loaders/src/loaders/docx/index.ts:19 
      const buffer = await fs.readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #66ff7c485d3f56b6 — Filesystem access.
repo/packages/file-loaders/src/loaders/excel/index.ts:63 
      const dataBuffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5440b562d459d7a — Filesystem access.
repo/packages/file-loaders/src/loaders/pdf/index.ts:27 
    const dataBuffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e6a142af9a528f19 — Filesystem access.
repo/packages/file-loaders/src/loaders/text/index.ts:16 
  const buffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2cd98ae8fa57aee2 — Filesystem access.
repo/packages/file-loaders/src/utils/isBinaryContent.test.ts:87 
    await writeFile(filePath, 'a'.repeat(20_000));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2159371d0fd2a2b6 — Filesystem access.
repo/packages/file-loaders/src/utils/isBinaryContent.test.ts:95 
    await writeFile(
      filePath,
      Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a, 0x00, 0x00, 0x00, 0x0d]),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/llm-generation-tracing

npm first-party
expand_more 8 low-confidence finding(s)
low env_fs production #b01f8e0eb2b31425 — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.test.ts:44 
    const raw = await fs.readFile(path.join(dir, jsonFiles[0]), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61cc174cf1c39736 — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.test.ts:65 
    const content = await fs.readFile(target, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6074a48b99db6716 — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.ts:36 
    await fs.writeFile(filePath, JSON.stringify(record, null, 2), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bf73ddb500ca09fc — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.ts:47 
      const content = await fs.readFile(target, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6200ac6cc71ae994 — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.ts:63 
        const content = await fs.readFile(file.fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fbe0641506f34bb5 — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.ts:91 
        const content = await fs.readFile(file.fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c399972a3f326004 — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.ts:106 
      const content = await fs.readFile(real, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #633ba209db4f9e08 — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.ts:115 
      const content = await fs.readFile(files[0].fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/local-file-shell

npm first-party
expand_more 78 low-confidence finding(s)
low env_fs production #f24f6995c4837ca7 — Filesystem access.
repo/packages/local-file-shell/src/contentSearch/base.ts:185 
        const content = await readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f0eccb583aa8d343 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:37 
      await writeFile(filePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e892ef6a65316eac — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:51 
      await writeFile(filePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a0b0f83ae2a870cc — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:62 
      await writeFile(filePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0b7857a78548da9e — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:81 
      await writeFile(filePath, 'const x = 1;');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #51e541406336c011 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:89 
      await writeFile(filePath, 'all: build');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c4d7aaf7a6eda511 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:97 
      await writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e198679e896fc3bb — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:106 
      await writeFile(filePath, 'A'.repeat(20_000));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a5fbad462f2c25a4 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:119 
        await writeFile(filePath, 'data');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a3df802b7acc233f — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:129 
      await writeFile(filePath, buf);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3e072c3ef921c2b6 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:138 
      await writeFile(filePath, 'A'.repeat(27_000));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f5dedbe23bc90e51 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:152 
      await writeFile(filePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8333863d55e05a26 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:163 
      await writeFile(filePath, 'a'.repeat(10 * 1024 * 1024 + 1));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c4df818aa1227a3d — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:173 
      await writeFile(filePath, "module.exports = { hello: 'world' };\n");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #44d4d57abde3b4f7 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:189 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ea7274855d62070b — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:197 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('nested');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0201c3ef59082fcf — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:221 
      await writeFile(filePath, 'hello world\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #38ded8363fa423b7 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:231 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('hi world\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e6c3d0e852dfa294 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:239 
      await writeFile(filePath, 'hello world\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cec1d7477d7f68c3 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:250 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('hi world\nhi again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c09c8c4275afced8 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:255 
      await writeFile(filePath, 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #adaee0dc1a01ec19 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:269 
      await writeFile(filePath, 'price is $10.00 and $20.00');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a71cd51b8f7d2173 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:279 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('price is $XX.XX and $20.00');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5c4df72f43a3c9e3 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:295 
      await writeFile(filePath, 'line1\nline2\nline3');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8370435212016aa7 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:310 
      await writeFile(filePath, 'line1\r\nline2\r\nline3\r\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #926b5154147b04f2 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:322 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('lineA\r\nlineB\r\nline3\r\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c3684478af04ba07 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:327 
      await writeFile(filePath, 'a\r\nb\r\na\r\nb\r\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3cea57ad60ea0ce0 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:338 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('x\r\ny\r\nx\r\ny\r\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #890fe8f002a0bf79 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:346 
      await writeFile(path.join(tmpDir, 'a.txt'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fb4762e0470f0859 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:347 
      await writeFile(path.join(tmpDir, 'b.txt'), 'b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #938bf59e456038b4 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:361 
      await writeFile(path.join(tmpDir, 'c.txt'), 'c');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3160cfe335171de9 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:362 
      await writeFile(path.join(tmpDir, 'a.txt'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4efd3bf70e3a2bd1 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:363 
      await writeFile(path.join(tmpDir, 'b.txt'), 'b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2a746bcbf4928062 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:376 
      await writeFile(path.join(tmpDir, 'small.txt'), 'x');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1aada6f9ae03d5d2 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:377 
      await writeFile(path.join(tmpDir, 'large.txt'), 'x'.repeat(1000));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c00b83bbb8185e25 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:389 
      await writeFile(path.join(tmpDir, 'a.txt'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e0f1e16752aeadbb — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:390 
      await writeFile(path.join(tmpDir, 'b.txt'), 'b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #19e31b3890027d35 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:391 
      await writeFile(path.join(tmpDir, 'c.txt'), 'c');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c3986558cef4cf5d — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:431 
      await writeFile(src, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #240bb8ebbaa0faa6 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:445 
      await writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #68a58fe3525c3353 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:471 
      await writeFile(src, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #862fe3797f8e2e6b — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:487 
      await writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #77fafd02c6a91ceb — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:512 
      await writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5396302581ef07b9 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:531 
      await writeFile(path.join(tmpDir, 'a.ts'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9d965468f128ebe7 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:532 
      await writeFile(path.join(tmpDir, 'b.ts'), 'b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7f83c02bdd20e8b2 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:533 
      await writeFile(path.join(tmpDir, 'c.js'), 'c');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1dccdf4ce8bd0d70 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:544 
      await writeFile(path.join(tmpDir, 'node_modules', 'pkg', 'index.ts'), 'x');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6e2591f108c4c6d3 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:545 
      await writeFile(path.join(tmpDir, 'src.ts'), 'y');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1eb87f2fba35b2e2 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:554 
      await writeFile(path.join(tmpDir, '.github', 'workflows', 'ci.yml'), 'name: ci');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0274e3d2f6a600dd — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:555 
      await writeFile(path.join(tmpDir, '.github', 'workflows', 'release.yaml'), 'name: release');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #99e172ff16df6dc0 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:569 
      await writeFile(path.join(tmpDir, 'a.ts'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4c6a2a791504e38d — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:577 
      await writeFile(path.join(tmpDir, 'a.ts'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #74d0565b8d87ff1b — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:589 
      await writeFile(path.join(tmpDir, 'search.txt'), 'hello world\nfoo bar\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6bf3714f92f536d2 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:599 
      await writeFile(path.join(tmpDir, 'search.txt'), 'hello world\nfoo bar\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #190a48c6d34bd345 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:607 
      await writeFile(path.join(tmpDir, 'empty.txt'), 'nothing here');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a27a03f5e66ee4c5 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:641 
      await writeFile(path.join(tmpDir, 'config.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cd1a9be1afaa1c9b — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:642 
      await writeFile(path.join(tmpDir, 'config.yaml'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #216726f36e0060a4 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:643 
      await writeFile(path.join(tmpDir, 'readme.md'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9b6fd57c41980efe — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:653 
        await writeFile(path.join(tmpDir, `file${i}.log`), `content ${i}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #20b5811d9e857b29 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:675 
      await writeFile(path.join(tmpDir, '.env'), 'A=1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7d6249c3d942a603 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:676 
      await writeFile(path.join(tmpDir, '.envrc'), 'export A=1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #eabf60c15df5eaa8 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:677 
      await writeFile(path.join(tmpDir, 'env.txt'), 'unrelated');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c23e84d8ca4192cb — Filesystem access.
repo/packages/local-file-shell/src/file/edit.ts:17 
    const content = await readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #515e078138e5052b — Filesystem access.
repo/packages/local-file-shell/src/file/edit.ts:61 
    await writeFile(filePath, newContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #96b7a8307c28adc7 — Filesystem access.
repo/packages/local-file-shell/src/file/search.ts:42 
          const content = await readFile(file.path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d88fb18bd1be387 — Filesystem access.
repo/packages/local-file-shell/src/file/write.ts:20 
    await writeFile(filePath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #60879ac14475997e — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:33 
  await writeFile(path.join(dir, 'a.txt'), 'hello\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d0cfe13c100c67cb — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:104 
    await writeFile(path.join(linked, 'new.txt'), 'new\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b1104608f7eb12dc — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:242 
    await writeFile(path.join(repo, 'a.txt'), 'hello\nworld\n'); // modify tracked

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #db5830d3b2e95201 — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:243 
    await writeFile(path.join(repo, 'new.txt'), 'fresh\n'); // untracked add

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b731d71d7a200b56 — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:271 
    await writeFile(path.join(repo, 'a.txt'), 'tampered\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #63fae821e5a3bcc8 — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:273 
    expect(await readFile(path.join(repo, 'a.txt'), 'utf8')).toBe('hello\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a7a072584ad7efe7 — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:277 
    await writeFile(path.join(repo, 'junk.txt'), 'x\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc15149721ad3d1a — Filesystem access.
repo/packages/local-file-shell/src/git/info.ts:138 
    const head = (await readFile(`${gitDir}/HEAD`, 'utf8')).trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #505087ff78f577ac — Filesystem access.
repo/packages/local-file-shell/src/git/repoType.ts:12 
    const content = await readFile(gitPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce7882f7b7b2b312 — Filesystem access.
repo/packages/local-file-shell/src/git/repoType.ts:40 
    const commondir = (await readFile(path.join(gitDir, 'commondir'), 'utf8')).trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1eefeacac6a86af4 — Filesystem access.
repo/packages/local-file-shell/src/git/repoType.ts:62 
    const config = await readFile(path.join(commonDir, 'config'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #54d83c3dc5ddc2da — Filesystem access.
repo/packages/local-file-shell/src/git/workingTree.ts:238 
    buf = await readFile(absolute);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/memory-user-memory

npm first-party
expand_more 5 low-confidence finding(s)
low env_fs test-only #313f20558ae647fe — Environment-variable access.
repo/packages/memory-user-memory/benchmarks/locomo/run.ts:7 
const baseUrl = process.env.MEMORY_USER_MEMORY_LOBEHUB_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #860eddac5a8698ef — Environment-variable access.
repo/packages/memory-user-memory/benchmarks/locomo/run.ts:8 
const benchmarkLoCoMoFile = process.env.MEMORY_USER_MEMORY_BENCHMARKS_LOCOMO_DATASETS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #253b3cf8db53edb9 — Environment-variable access.
repo/packages/memory-user-memory/benchmarks/locomo/run.ts:9 
const webhookExtraHeaders = process.env.MEMORY_USER_MEMORY_WEBHOOK_HEADERS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low pii_flow test-only Excluded from app score #99764a6ab29ff261 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.
repo/packages/memory-user-memory/benchmarks/locomo/run.ts:23 · flow /tmp/closeopen-9mgsdxzw/repo/packages/memory-user-memory/benchmarks/locomo/run.ts:7 → /tmp/closeopen-9mgsdxzw/repo/packages/memory-user-memory/benchmarks/locomo/run.ts:23 
  const res = await fetch(new URL(path, baseUrl).toString(), {
    body: JSON.stringify(body),
    headers: {
      'Content-Type': 'application/json',
      ...webhookHeaders,
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
low env_fs production #e89005a87ec301a0 — Filesystem access.
repo/packages/memory-user-memory/src/converters/locomo.ts:176 
  const raw = readFileSync(absPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/model-bank

npm first-party
expand_more 1 low-confidence finding(s)
low env_fs production #31d40ddf97758c42 — Filesystem access.
repo/packages/model-bank/src/exports.test.ts:12 
  const packageJson = JSON.parse(readFileSync(packageJsonPath, 'utf8')) as {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/observability-otel

npm first-party
expand_more 11 low-confidence finding(s)
low env_fs production #1ac3289df7c469fd — Environment-variable access.
repo/packages/observability-otel/src/node.ts:20 
    'env': process.env.VERCEL_ENV || process.env.NEXT_PUBLIC_VERCEL_ENV,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6bc2b527fade2ab6 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:23 
      process.env.VERCEL_BRANCH_URL || process.env.NEXT_PUBLIC_VERCEL_BRANCH_URL || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d960f265d25d8ea8 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:24 
    'vercel.deployment_id': process.env.VERCEL_DEPLOYMENT_ID || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86d90caee9f04856 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:25 
    'vercel.host': process.env.VERCEL_URL || process.env.NEXT_PUBLIC_VERCEL_URL || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f697a92d23dfa9b5 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:26 
    'vercel.project_id': process.env.VERCEL_PROJECT_ID || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c58aa9704a9c9d8 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:27 
    'vercel.region': process.env.VERCEL_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea0a3eb993f08482 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:28 
    'vercel.runtime': process.env.NEXT_RUNTIME || 'nodejs',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d9e9baf61cf611e — Environment-variable access.
repo/packages/observability-otel/src/node.ts:30 
      process.env.VERCEL_GIT_COMMIT_SHA || process.env.NEXT_PUBLIC_VERCEL_GIT_COMMIT_SHA,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8535365f09e0a20 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:32 
    'service.version': process.env.VERCEL_DEPLOYMENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1159d69a06c42ae9 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:39 
    'node.ci': process.env.CI ? true : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c78d3d60212fcdd1 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:40 
    'node.env': process.env.NODE_ENV,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/openapi

npm first-party
expand_more 5 low-confidence finding(s)
low env_fs production #ef726beac209832f — Filesystem access.
repo/packages/openapi/src/helpers/file.ts:118 
          const bin = fs.readFileSync((f as any).filepath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #10f1cad390cb4878 — Environment-variable access.
repo/packages/openapi/src/middleware/auth.ts:54 
  const isMockUser = process.env.ENABLE_MOCK_DEV_USER === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b680a1936d8fcb5 — Environment-variable access.
repo/packages/openapi/src/middleware/auth.ts:55 
  if (process.env.NODE_ENV === 'development' && (isDebugApi || isMockUser)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9afb7f205079bf65 — Environment-variable access.
repo/packages/openapi/src/middleware/auth.ts:57 
    c.set('userId', process.env.MOCK_DEV_USER_ID || 'DEV_USER');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #38af4565e44d77de — Environment-variable access.
repo/packages/openapi/src/middleware/permission-check.ts:46 
    if (options.skipInDev && process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/python-interpreter

npm first-party
expand_more 4 low-confidence finding(s)
low env_fs production #aba71c3d5a637614 — Filesystem access.
repo/packages/python-interpreter/src/worker.ts:77 
        this.pyodide.FS.writeFile(file.name, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48ddbe4f06ff89b0 — Filesystem access.
repo/packages/python-interpreter/src/worker.ts:79 
        this.pyodide.FS.writeFile(`/mnt/data/${file.name}`, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b462333f1b309a7 — Filesystem access.
repo/packages/python-interpreter/src/worker.ts:95 
      const content = (this.pyodide.FS as any).readFile(filePath, { encoding: 'binary' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa538b37d37f1b38 — Filesystem access.
repo/packages/python-interpreter/src/worker.ts:175 
      this.pyodide.FS.writeFile(`/usr/share/fonts/truetype/${filename}`, new Uint8Array(buffer));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/ssrf-safe-fetch

npm first-party
expand_more 10 low-confidence finding(s)
low env_fs production #0c787713f1cce91b — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:35 
    delete process.env.SSRF_ALLOW_IP_ADDRESS_LIST;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a6bd854b21bdafc — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:36 
    delete process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17292e15600d40de — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:106 
      process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98d1d241e1b31338 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:118 
      process.env.SSRF_ALLOW_IP_ADDRESS_LIST = '127.0.0.1,192.168.1.100';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b44f47da9da84a94 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:167 
      process.env.SSRF_ALLOW_IP_ADDRESS_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dce0c459595aab7b — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:177 
      process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS = 'invalid-value';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac9da66eccb8f235 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:461 
      process.env.SSRF_ALLOW_IP_ADDRESS_LIST = '127.0.0.1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #042798e5bae1d2d3 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:462 
      process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b331e575f49b3e5e — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.ts:72 
    const envAllowPrivate = process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1af4f96fc1f9ef1f — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.ts:78 
        process.env.SSRF_ALLOW_IP_ADDRESS_LIST?.split(',').filter(Boolean) ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/tool-runtime

npm first-party
expand_more 3 low-confidence finding(s)
low env_fs test-only #073283947286dc1c — Filesystem access.
repo/packages/tool-runtime/src/__tests__/LocalSystemExecutionRuntime.test.ts:112 
    const output = await runtime.readFile({ path: '/tmp/cat.png' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d5f8448f9ad6f490 — Filesystem access.
repo/packages/tool-runtime/src/__tests__/LocalSystemExecutionRuntime.test.ts:134 
    const output = await runtime.readFile({ path: '/tmp/cat.png' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #87a9cd5049844480 — Filesystem access.
repo/packages/tool-runtime/src/__tests__/LocalSystemExecutionRuntime.test.ts:153 
    const output = await runtime.readFile({ path: '/tmp/a.txt' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/trpc

npm first-party
expand_more 4 low-confidence finding(s)
low env_fs production #6cf8f5fb696804de — Environment-variable access.
repo/packages/trpc/src/lambda/context.ts:122 
  const isMockUser = process.env.ENABLE_MOCK_DEV_USER === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab726332172f97d2 — Environment-variable access.
repo/packages/trpc/src/lambda/context.ts:124 
  if (process.env.NODE_ENV === 'development' && (isDebugApi || isMockUser)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7148548c9f18086e — Environment-variable access.
repo/packages/trpc/src/lambda/context.ts:126 
      userId: process.env.MOCK_DEV_USER_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #57caa314df496191 — Environment-variable access.
repo/packages/trpc/src/middleware/openTelemetry.test.ts:70 
    process.env.ENABLE_TELEMETRY = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/utils

npm first-party
expand_more 3 low-confidence finding(s)
low env_fs production #e1ee5c4e9016f107 — Environment-variable access.
repo/packages/utils/src/env.ts:1 
export const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #731501a11e75f137 — Environment-variable access.
repo/packages/utils/src/jina.ts:7 
  process.env.JINA_USE_CN_DOMAINS?.trim().toLowerCase() === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae948d4c72b9bc34 — Environment-variable access.
repo/packages/utils/src/server/apiKeyHash.ts:3 
const getApiKeyHashSecret = () => process.env.KEY_VAULTS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

@codesandbox/sandpack-react

npm dependency
medium telemetry tooling Excluded from app score unknown #a82c435a526641e7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/@[email protected]__reposrc/website/docs/src/pages/_app.tsx:2 
import amplitude from "amplitude-js";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry tooling Excluded from app score unknown #51f2bfb4d88abf22 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/@[email protected]__reposrc/website/docs/src/pages/_app.tsx:10 
  amplitude.getInstance().init(API_KEY);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry tooling Excluded from app score unknown #9c343b8a3330ff8a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/@[email protected]__reposrc/website/docs/src/pages/_app.tsx:17 
    amplitude.getInstance().logEvent("pageview", {

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #1a1a21d29401d601 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/@[email protected]__reposrc/website/landing/pages/_app.tsx:2 
import amplitude from "amplitude-js";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #cc2edfab8cb65488 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/@[email protected]__reposrc/website/landing/pages/_app.tsx:9 
  amplitude.getInstance().init(API_KEY);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #e06b69d823efc70a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/@[email protected]__reposrc/website/landing/pages/_app.tsx:17 
    amplitude.getInstance().logEvent("pageview", {

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 20 low-confidence finding(s)
low env_fs tooling Excluded from app score unknown #0f13ff15cafd444b — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/examples/custom-npm-registry/index.js:17 
      token: process.env.GH_PKG_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff12fac79945c3bc — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sandpack-client/gulpfile.js:37 
const paths = process.env.CI

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b865b6e1f86a7ccc — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sandpack-client/rollup.config.js:55 
          "process.env.CODESANDBOX_ENV": `"${process.env.CODESANDBOX_ENV}"`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75c571d096b42ad1 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/sandpack-client/src/clients/node/index.ts:302 
              const content = await this.emulator.fs.readFile(
                event.path,
                "utf8"
              );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42a6c50d562dcede — Filesystem access.
pkgs/npm/@[email protected]__reposrc/sandpack-client/src/clients/node/index.ts:334 
              const newContent = await this.emulator.fs.readFile(
                event.newPath,
                "utf8"
              );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b2b23a897e6ef02 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/sandpack-client/src/clients/node/index.ts:400 
          this.emulator.fs.writeFile(key, value, { recursive: true });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #345a2f0324c7e598 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sandpack-client/src/clients/runtime/index.ts:35 
  process.env.CODESANDBOX_ENV === "development"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9eacceaf84aa2d5c — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sandpack-client/src/clients/runtime/index.ts:37 
    : `https://${process.env.PACKAGE_VERSION?.replace(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1ed1ec418e67d48 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/sandpack-client/src/clients/runtime/index.ts:114 
                return this.options.fileResolver!.readFile(data.params[0]);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #581fb27120e1557b — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/sandpack-client/src/clients/runtime/index.ts:439 
    return fetch("https://codesandbox.io/api/v1/sandboxes/define?json=1", {
      method: "POST",
      body: JSON.stringify({ files: paramFiles }),
      headers: {
        Accept: "application/json",
        "Content-Type": "application/json",
      },
    })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unknown #3d4a172722b2bb64 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/sandpack-react/scripts/rollup-generate-unstyled-types.js:2 
const fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #fb0f8d5e6e286f16 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/sandpack-react/scripts/rollup-generate-unstyled-types.js:8 
      fs.writeFileSync(
        "dist/unstyled.d.ts",
        `export * from './unstyled/index';`
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6f83811c3dd6b1f — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sandpack-react/src/components/CodeEditor/CodeMirror.tsx:478 
              {...(process.env.TEST_ENV ? { "data-testId": "read-only" } : {})}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #66476dcc0e024dd6 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/sandpack-react/src/components/common/OpenInCodeSandboxButton/UnstyledOpenInCodeSandboxButton.tsx:71 
    const response = await fetch("https://api.codesandbox.io/sandbox", {
      method: "POST",
      body: JSON.stringify({
        template: state.environment,
        files: normalizedFiles,
        privacy: state.exportOptions.privacy === "public" ? 0 : 2,
      }),
      headers: {
        Authorization: `Bearer ${state.exportOptions.apiToken}`,
        "Content-Type": "application/json",
        "X-CSB-API-Version": "2023-07-01",
      },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #edda70064fdf59af — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sandpack-react/src/styles/index.ts:18 
export const { createTheme, css, getCssText, keyframes } = process.env.SANDPACK_UNSTYLED_COMPONENTS === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04bf8d6320a6295b — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sandpack-react/src/utils/useAsyncSandpackId.ts:22 
const sandpackClientVersion = process.env.SANDPACK_CLIENT_VERSION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2ada6264ec4530fa — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/website/codesandbox-theme-docs/src/contexts/config.tsx:60 
  if (process.env.NODE_ENV === "development") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #350399dffbf9dffb — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/website/docs/src/pages/_app.tsx:7 
const API_KEY = process.env.NEXT_PUBLIC_AMPLITUDE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41acc419b092f248 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/website/landing/pages/_app.tsx:6 
const API_KEY = process.env.NEXT_PUBLIC_AMPLITUDE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81f8a391a014bca5 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/website/theme/next.config.js:1 
const BASE_PATH = process.env.BASE_PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@ant-design/icons

npm dependency
expand_more 1700 low-confidence finding(s)
low env_fs dependency Excluded from app score #b258f9984e35783c — Environment-variable access.
pkgs/npm/@[email protected]/es/components/AntdIcon.js:65 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #447874e06b3a1817 — Environment-variable access.
pkgs/npm/@[email protected]/es/components/AntdIconLight.js:51 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dfa490bfe00112ff — Environment-variable access.
pkgs/npm/@[email protected]/es/components/Icon.js:79 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #64174a1fe1cb79f8 — Environment-variable access.
pkgs/npm/@[email protected]/es/cssUtils.js:150 
  if (process.env.NODE_ENV !== 'production' && typeof console !== 'undefined') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #589a08bd9c7f0d26 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AccountBookFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #476290b3cf320374 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AccountBookOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #318f702d47185d77 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AccountBookTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #58fdbaa036582bcb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AimOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee477393b8550cb6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlertFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0e8164330bd2eb5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlertOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b61b3822b2fffc5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlertTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a24138ca32b4e98f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlibabaOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aeb905283cd7cc1f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlignCenterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48c6bd0954a1b2a2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlignLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11079c682c4ee10a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlignRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f6e6cfbd12538c1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlipayCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7808cdd8ec6d626d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlipayCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2f3ac199742beda — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlipayOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3cc6700de3511f9b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlipaySquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f31f0676c9bf191 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AliwangwangFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac2e960147c31bd2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AliwangwangOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4612057167e2d917 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AliyunOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89bdf6dd2404ebaf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AmazonCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91f9a0e8f16f21ce — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AmazonOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b9c5e23e4760a01d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AmazonSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32857c2067e1daa4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AndroidFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e33b46fd7c27757f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AndroidOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1698bdbe03f03070 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AntCloudOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4960e5047a052e6d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AntDesignOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2f3ecb0bbec92b58 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AnthropicFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97fbcb23ee9e8caf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ApartmentOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4fa24f181b7c3723 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ApiFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e9cf26f6533a7ec — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ApiOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9fe5d20c364a359c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ApiTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #451e919448fe35ba — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AppleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03c0179fc207115d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AppleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e69027e5fc3cc094 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AppstoreAddOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #226852fce8d85657 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AppstoreFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2f1c8570a5feba49 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AppstoreOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8c16913c238116a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AppstoreTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4145a851f198ac1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AreaChartOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #00d00becfe4c3ede — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ArrowDownOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94bd8eb46a63d971 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ArrowLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c186b6d71aa298c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ArrowRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1e0284cf00f6428 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ArrowUpOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43143e3f143e327c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ArrowsAltOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60fe5ad4fb59f5d8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AudioFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7513ad324f5c532a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AudioMutedOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #450225726ed2a36d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AudioOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8184971b21ded905 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AudioTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e9bdb8b915dad2c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AuditOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dfa0e51ebd03a161 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BackwardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ff067f31ffaab74 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BackwardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d16fc12248216e27 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BaiduOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd66ee61e765159c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BankFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #997e6d8ec579661b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BankOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1121701d0fb2ff38 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BankTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e1334da549e0e31 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BarChartOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #608dd230e3f3d89a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BarcodeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14864fd6491a302c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BarsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d19b7d7fc175939b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BehanceCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0337b9a4193d539 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BehanceOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aed9947ad97dde18 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BehanceSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13bc8d7d68d1e706 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BehanceSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a056a79969b95535 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BellFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2602692eff9d4803 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BellOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20d7452b20a39430 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BellTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e74e2a66a28fa89f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BgColorsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa38266c82b4148b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BilibiliFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e72a9e1b66056d21 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BilibiliOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8606306db8a6f396 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BlockOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2ff03aee08c6a144 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BoldOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15b03991c2e7aba8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BookFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d299d5fdcd513e4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BookOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af2789376388a8eb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BookTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0a31d9c159ee2b6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderBottomOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ef59e8ccfc082d3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderHorizontalOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34b8ef89727c5ad2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderInnerOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57985e458ef7ddb6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #328cc71d1849cf35 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderOuterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66ff753ccb812f01 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a4781a28d164c0a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #27bb45294ed509fa — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderTopOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c5f2f177260afc19 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderVerticleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e0c1bec8eb2d1e7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderlessTableOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7eac6688b17d4518 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BoxPlotFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fdc24073d24f0ad6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BoxPlotOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45e98ed0a748d871 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BoxPlotTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #366ff7b9edce8800 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BranchesOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e6a7cfa2ec40095 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BugFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bff35a7b9bffa62d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BugOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc9dd1e836c9331a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BugTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be95f2405e0381d1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BuildFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe036c4bae07104a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BuildOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eadfab9a548d6efb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BuildTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d8251edc913e4d0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BulbFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a8285d87cc22253 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BulbOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #172d08173bf79832 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BulbTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4b3752013b074bf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CalculatorFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a7c5d138ea5adc5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CalculatorOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a25bac6ea2b2982a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CalculatorTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #39e625d20de5b84d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CalendarFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c585f727d0f83c45 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CalendarOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ae3a1ecea3fcdb9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CalendarTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17d6f34d754b2713 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CameraFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c44b6f52b8b32fb5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CameraOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17fb1545a575c769 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CameraTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4fde6e25d916a580 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CarFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb84efd1a01de0d9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CarOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dcb0833bcc90bd40 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CarTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d550dc6690f7089 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CaretDownFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c152d8ff0bf31cd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CaretDownOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #027e61d91373e0ea — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CaretLeftFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9cb3267b45ea8a57 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CaretLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6193f9857f9497d3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CaretRightFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9664525c2366aaba — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CaretRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62711ea6a80f0bd4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CaretUpFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0c5f416c3295e36 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CaretUpOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a21bb0fa9fdd6c1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CarryOutFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bac14d3eb90779e5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CarryOutOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3e138cb091a41fb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CarryOutTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #65992f9890eb4074 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CheckCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ceadda568e0e887d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CheckCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93d41a25f68eaa80 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CheckCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f0a8c3f09d5a5fa — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CheckOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #533159d5063c9b99 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CheckSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e067bc706629cb7d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CheckSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #58bd4b4d2841ecaa — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CheckSquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1941270a7e2cdf8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ChromeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8fa4d5582746b04d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ChromeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4097257b1162901 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CiCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42e5e664c0b3f14a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CiCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d417169e15a16490 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CiCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57f35955e723231f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CiOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d7047f946e8404f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CiTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b9174977aef2d4b3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ClaudeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b4c5784313e854e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ClearOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad38a2b231d2290d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ClockCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af4d1b46133f5dfc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ClockCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a06c5a1c1916f17f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ClockCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8f5b918de458f47 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloseCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d641a74aebed9c0f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloseCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08114f123d61ab69 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloseCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76e7873b44ee1800 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloseOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a87d589c5dec1689 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloseSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8315d4b80ca128f0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloseSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #076df649624aaae4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloseSquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f9f3e063183336e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloudDownloadOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75adab4c2848a9c1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloudFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc229fb44601d491 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloudOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #183169df0e0aefe9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloudServerOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ae32d0ad5eec431 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloudSyncOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7cabb9ae0e5fd36a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloudTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #598350e57615f8ae — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloudUploadOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #814fba7180926bb3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ClusterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #07b59fb7efe88f19 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97de66acea8961c0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a1aee9e6a0809de — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodeSandboxCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b217c2fdd18edca — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodeSandboxOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8172c397a31fd1a5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodeSandboxSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #194cfe5545620702 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodeTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f168e5cb6245d606 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodepenCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab79b12be5eded2c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodepenCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c41aad629246947d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodepenOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1cdaadb268f8e3af — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodepenSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81e18435ccf4f674 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CoffeeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20c0640e440914cc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ColumnHeightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c292be7119fcf57 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ColumnWidthOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #104c555acc42b04e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CommentOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f4e081d2de831c9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CompassFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e65b92a251db28e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CompassOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1146555479cfa9e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CompassTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af246d5c5bc67aa6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CompressOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c5167c5f57235023 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ConsoleSqlOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb8c62b86d9b428f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ContactsFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2f301514f72bd764 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ContactsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15f804b512e6206f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ContactsTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2efe6af25a5782bf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ContainerFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3f8735ab8a1464e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ContainerOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4506457399c82c91 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ContainerTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f9770678b6b1d93 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ControlFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b15645f70438378e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ControlOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51e15c65e1cc95fc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ControlTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #87c0dc8c3a60eb3c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CopyFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #67abf46749297919 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CopyOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9058acae36136eb2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CopyTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #58911b031989e9a6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CopyrightCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2c05fd865814585 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CopyrightCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0c6d125b0825bed — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CopyrightCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e746a91f66955e30 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CopyrightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3c975c8d7630299 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CopyrightTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4def72aae5ee4a20 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CreditCardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a552b81f572463b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CreditCardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c614d158ad7d22b6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CreditCardTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b89dbd6247a1bce9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CrownFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36ac0d89e5ef0cbf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CrownOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d8eb4ff5934e3381 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CrownTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7ba87da866afd98 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CustomerServiceFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1732073b7feea02d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CustomerServiceOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6093e3754555d5ed — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CustomerServiceTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1137203e19d3dbe — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DashOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c456f95e7ccd1c2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DashboardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d4699a1ec1d6052 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DashboardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #342825a73d695ba0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DashboardTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f076dd4f3c0fd51c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DatabaseFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #982464fab075358b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DatabaseOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61fa79b30295a8a4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DatabaseTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5368d15c2f21dedc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DeepSeekFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b50a03e6805fd4dd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DeleteColumnOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7d606d02f847c2a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DeleteFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #837d26d3362494a1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DeleteOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b6f97c224611774 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DeleteRowOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ddb047d69b0262cc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DeleteTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1af064a524d935ed — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DeliveredProcedureOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d49052655c9b99b0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DeploymentUnitOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e6b523b39a2fb1e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DesktopOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a4c2f6304e5b59d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DiffFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3327e721d72a393c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DiffOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1dc3d3c8bf682e0d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DiffTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #349b9517dc24a520 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DingdingOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6eafa57efd6b2317 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DingtalkCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #71522e373845548c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DingtalkOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13432c9fbefee01c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DingtalkSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7011be3d2859e32 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DisconnectOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7498c071bd8a35a0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DiscordFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bae904e9b8aeec6e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DiscordOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49d5cce29ff827f0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DislikeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #552045803486aa10 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DislikeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3bf1124610081979 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DislikeTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e87bbce04d5b728 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DockerOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a2c93afe17d6f1f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DollarCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #870267ef3440fb37 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DollarCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f49275ed3fa4b8a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DollarCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fcf7f6ef7e5a1beb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DollarOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c5bb23825af17c9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DollarTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #292fb778c9bcb4c0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DotChartOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95c999cc19443672 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DotNetOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #782bafaaf40e00d0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DoubleLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #431429e8f60e8fa5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DoubleRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7af08037dfe815d2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DownCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d5a6c3002e59b1ba — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DownCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #56a3161d3a9c6970 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DownCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc273ab5cb66dfb4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DownOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c297291c6eb7ad6c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DownSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8721a70fee247891 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DownSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d39bb62b3c25844 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DownSquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #404b8a46f8624099 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DownloadOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #edad13f645afb1da — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DragOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fccd77a2f861cb15 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DribbbleCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a4d76d63dd336e43 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DribbbleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c7a2aa712ebe72a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DribbbleSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #297f4cc7912de380 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DribbbleSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c195803403c4658a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DropboxCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f76cf2a6bdd42d2d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DropboxOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17935ace11d44ff8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DropboxSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8dd6c1dbeeefd8e5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EditFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5197077fd88b6191 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EditOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76d885c0c914f5f7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EditTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08e2d4378be88791 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ElevenLabsFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d30a98e13b6bbf9c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EllipsisOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d891d731528bafe — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EnterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #caf082e49507dde2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EnvironmentFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #857c22623fbe8b95 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EnvironmentOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be1afd646dd56e33 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EnvironmentTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c3a66889108782d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EuroCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ecb6b3355e8c15fc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EuroCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51337f767ec573b8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EuroCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e172be4e02637fb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EuroOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed5d1c1be664d865 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EuroTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #381e0b5b36e6bc1b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExceptionOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #579ecfd02e1bb96d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExclamationCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0bd79d4f952c04a3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExclamationCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6eb3273711191e9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExclamationCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89f9127b8acb3af1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExclamationOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #339a0639442667b8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExpandAltOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #294426b67b2dfcfa — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExpandOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8badafa4d2d01c6f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExperimentFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78f7d5efddd8302c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExperimentOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60fb2ca3da84d9c9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExperimentTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a91e084e81297a49 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExportOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #31ff066f673c5d0f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EyeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c337d233782eb3c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EyeInvisibleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98c3af1f809a64e2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EyeInvisibleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4fc592ede6ee0f83 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EyeInvisibleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0ee378c8d55098b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EyeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c32eecc36bef980 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EyeTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25d323676608216e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FacebookFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f905631f461c76b5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FacebookOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51aefb5064b19c87 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FallOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #227c9361b26b4586 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FastBackwardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4ac806e3fb33e2b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FastBackwardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9807b77b32c1aa37 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FastForwardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b172bd9a8cad3bf1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FastForwardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52a5181985ad7e5c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FieldBinaryOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8df940bd23c3a665 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FieldNumberOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e6c35cef3ef150a6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FieldStringOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e9a0f9b23375b981 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FieldTimeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a3da230025e1d95 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileAddFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3f83471a848954d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileAddOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed929ac51b9b12bf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileAddTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7808167cb49b5c10 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileDoneOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef845efc2d7b2e4a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileExcelFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e94c6b0931d9542 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileExcelOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13441f382ac9e281 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileExcelTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c60912fac6acfe8f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileExclamationFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #784931126931a5a9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileExclamationOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e48304988114ad62 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileExclamationTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eda17ef6c29e5b6b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c5bbb096570b0e6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileGifOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4625145228b16c0e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileImageFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c5e797e5c775bc2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileImageOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2716d91004ece3e7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileImageTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #edc0d9936fbf3c7e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileJpgOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13a314d4c059bdb7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileMarkdownFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6073b574b8104115 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileMarkdownOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66fb49d4a675ffd7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileMarkdownTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c1048d1d5da5271 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b128052b7c0538ed — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilePdfFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ebbc83bf5eda693 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilePdfOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b63901c5476fe91c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilePdfTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5103cfab40d9ee8a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilePptFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2586d2cab0a95919 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilePptOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e8f200605325b619 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilePptTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3de8b48599723210 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileProtectOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1c631e20fc69f0c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileSearchOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f111c71c565a9aa — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileSyncOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b29421313e93cba3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileTextFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2e09e8b1cc2a373 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileTextOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4f245141dcaa62c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileTextTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #87d9afdd8f3467c8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ffcea29eaa83ccee — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileUnknownFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da891ce825311c6d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileUnknownOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df76172ac7d4d7a3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileUnknownTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3f150598f7a317c7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileWordFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4cced8406907b18 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileWordOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #061441e06ebd5e62 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileWordTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6904e0e0dff101c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileZipFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e12e72d21a67348 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileZipOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8faa90a00883cfef — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileZipTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b25014093a6945be — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilterFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5eae9a792c2b647c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5776529a2ced7781 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilterTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe814e2e2d2f15e8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FireFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c83e40c263f7998 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FireOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bfc0ac0a057ec44f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FireTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1134b68aef99955b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FlagFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b38ea32df2c3fd1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FlagOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #677a4006d6395f42 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FlagTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63cf484f5137041e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderAddFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8dcd9800265e65f5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderAddOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52c9788eaa1dbb0a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderAddTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c54e5084d5e6b95 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c59900e4980a9705 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderOpenFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf814a82aa0da908 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderOpenOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac3bdfa2c76e8b14 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderOpenTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06a7c8e608d03a09 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #891305c5734ac230 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36eb4cf53edf76fa — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderViewOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50ce00c75962a48e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FontColorsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b20579723b40db4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FontSizeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9fddf23498cfa1a2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ForkOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dbfc120b9baa170a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FormOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d90580058d2b0def — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FormatPainterFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45123a7bdd059b08 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FormatPainterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c958dc92ae9de047 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ForwardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d4bdb63aaf5cbac — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ForwardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0c9d1d717c7e1e2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FrownFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8531dbcbcecebc9d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FrownOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22fda36d1e87ce68 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FrownTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10837dafdc38b6b7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FullscreenExitOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35837eb64b66ac5d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FullscreenOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1d1b0da872ee8e3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FunctionOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9279975c569c38c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FundFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #effb7174a2438366 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FundOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61ef2dda9b380a68 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FundProjectionScreenOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0589382bb49ad03b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FundTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1561696db59c780c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FundViewOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e127bade2216d30 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FunnelPlotFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abe1648290143ef8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FunnelPlotOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca07b4f41b59c331 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FunnelPlotTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44ddac5f9030c8f6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GatewayOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8000e041d16ddde — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GeminiFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d75752f53ca0181 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GifOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7dbe9f6b5fcd7b8d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GiftFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63472cacb7b98603 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GiftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e210a860fece2cc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GiftTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1acdaccd72af7165 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GithubFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57df34522aeb8bf1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GithubOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f8da18422c8916b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GitlabFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4c779839c6affd3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GitlabOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #500976412b8b77a7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GlobalOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3975030d136aebc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GoldFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a561328fd9217156 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GoldOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ecd5bb24828d810 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GoldTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af46c0a6d5bb765f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GoldenFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #994afe90887273f4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GoogleCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7603ac037fa5dc79 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GoogleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f732e96bc8d63c3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GooglePlusCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c84ea64a4d7c243b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GooglePlusOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #80132444a9f488e9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GooglePlusSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0c6ca723f07e51d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GoogleSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85a866287d44cee9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GroupOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cebee1ee37e7d035 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HarmonyOSOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f38e3a74109421c8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HddFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f32c07dccba358a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HddOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ebea1ffc1b0a7753 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HddTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ccee239d5c968c7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HeartFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #744fe5e401061ae6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HeartOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a613c32aee4e780c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HeartTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5df91350bddedb95 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HeatMapOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc5d524cb0e35e50 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HighlightFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #698c99a49a54593f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HighlightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7526fcc89ba4aa4a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HighlightTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9eb1fae357c2df07 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HistoryOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f69b04655a2d264a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HolderOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #546d29858aafaf3c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HomeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ecb9dbc2cfb90ede — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HomeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0406bc29897f7db — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HomeTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce1d5c2f8dc551d7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HourglassFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca0ff2ec71c0b4b1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HourglassOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a3a4ba76e9aa91d3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HourglassTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #606b0d61183fa700 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/Html5Filled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c970865fb667926 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/Html5Outlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #230485e921ca94dd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/Html5TwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3bbc82a0a4895627 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HuggingFaceFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02a65ab735b01fa1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/IdcardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76ef6069f91df31b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/IdcardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b710dedfb9f98713 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/IdcardTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eec64c51f4730046 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/IeCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e2febafb97195db — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/IeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #096c261eb487179f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/IeSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bbdbf3a8127bc453 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ImportOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dfe94a8ea3383c39 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InboxOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d2248e75a440720 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InfoCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2aa17a6e276576a3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InfoCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ed1c5831ceb9cf1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InfoCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32d12a8233d374ba — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InfoOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41e521f691299587 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InsertRowAboveOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4975dc865aba9878 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InsertRowBelowOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc484460c932fb9c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InsertRowLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #101f4b90f49d3646 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InsertRowRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b1e7837694cc549c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InstagramFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d371db8ba6dff75e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InstagramOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d16cf3e67aa61a4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InsuranceFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5467193088091c0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InsuranceOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1707edc4c19d3a3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InsuranceTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e7d1339d089b4e79 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InteractionFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a70b7ecbdb1a6aa9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InteractionOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1f74bfe4f5e1fb3f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InteractionTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a7d1b51f300a6c0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/IssuesCloseOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd3b06725a07c00e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ItalicOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5aa760deabd45b83 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/JavaOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb61013ca4c4d256 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/JavaScriptOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e7ad396b9b1f679 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/KeyOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45ea08587b7a00fb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/KubernetesOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dcfa8945c3e09dc8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LaptopOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c624d8ecaba92814 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LayoutFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e8bb97be82d2b40a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LayoutOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef8c90f9a75eaddb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LayoutTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dcddab54767e6843 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LeftCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #87ac8ed868e6be94 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LeftCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98c98f70cccb5ea2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LeftCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9075fdf1f6399501 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b09730e068d214c3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LeftSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75ec8627a15acbef — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LeftSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60e29dcf7921955f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LeftSquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a5969541eaa181d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LikeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22509c108713d673 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LikeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c25cf5d8e871fa7a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LikeTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c28164a081e8a05b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LineChartOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #814a09f6e56f0afd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LineHeightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9561dfb722c4a102 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LineOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #564a0b9b17c45d81 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LinkOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85df68da083f25a8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LinkedinFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #39bfdcb54cb98852 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LinkedinOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb5b35e66c2484b8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LinuxOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1f72d53ee63b8b53 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/Loading3QuartersOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bfbf65e44d2cbaea — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LoadingOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1452734006140f2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LockFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2e88031bcbaa91c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LockOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #716ca0c4a9d73e1a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LockTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d9df310150627f6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LoginOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf4dcf4d6343b362 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LogoutOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d9caa82ec0848774 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MacCommandFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #143fca418acb59c4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MacCommandOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7062a68124f7bd28 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MailFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01834fa16a2be585 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MailOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b96a28011cca58da — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MailTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb567f1b29fb8449 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ManOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a1e0d6d5df71304 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MastodonFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc5e47991cd1fb9b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MedicineBoxFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48484034c194d4ca — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MedicineBoxOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a743b12ee3e5604a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MedicineBoxTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1357ad63ac856687 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MediumCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #23c108e9bfe38d6b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MediumOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf12baba47c71631 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MediumSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ffe55e4fe0ac4d71 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MediumWorkmarkOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48afd7a1f7cba60a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MehFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b3734ae33bced93 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MehOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a2146dc4a40b8c71 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MehTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a04e0bed8afa802 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MenuFoldOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e70c99800abfef3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MenuOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd014563de77431f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MenuUnfoldOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c165294fe432aa68 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MergeCellsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0d4feddede622f7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MergeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3789cafe6303d5ac — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MergeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aca242b0dd732553 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MessageFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50f411241c7d7e08 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MessageOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d2f6568f226022b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MessageTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc157ba119e66313 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MinusCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76aff4e7469823bd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MinusCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e463153047643f31 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MinusCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e08f2245629ea95f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MinusOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea7331ca61dbd4bf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MinusSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d2fd1949e7138f4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MinusSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6219c3af0bd226ba — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MinusSquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86077f3b0abc95bf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MistralFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d6397b9b13c06fc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MobileFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5cb1c35d16bf5bb4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MobileOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d35762fb4eb6e344 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MobileTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e1a749f7ef423ca — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MoneyCollectFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2fdc40557aed28ed — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MoneyCollectOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #70dc930a57bb84a5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MoneyCollectTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #59d9223badd65efb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MonitorOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b81d7f137fd0131 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MoonFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8565501e0b56b254 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MoonOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #33332de30e697aa0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MoreOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a314dcf2bbdd7ecb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MutedFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #67060820e292d51d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MutedOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a154741cfd841737 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/NodeCollapseOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34283df68074100c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/NodeExpandOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f90f351f299a9eb7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/NodeIndexOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6433dcc23fa42c05 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/NotificationFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5a3e0aee99eae00 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/NotificationOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b1efaf1cb24a73e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/NotificationTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75dd675e54d38372 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/NumberOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14a199e847897a8a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/OllamaFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee394c021405a928 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/OneToOneOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ad9277daaccf4a5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/OpenAIFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #123ded56fe78ea9b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/OpenAIOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97d0c4ad052462c1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/OrderedListOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4d54938c4c0e733 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PaperClipOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #316f4eb1ea94b523 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PartitionOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #197f27432a1dd33d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PauseCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d7489b1343757ae — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PauseCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a45bdfaae38a360 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PauseCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #faf8844e681275a0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PauseOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a12c7ac0e14feb6b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PayCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #607e10d489df6a24 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PayCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f852af9618aea1a4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PercentageOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #380c909c77f31886 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PerplexityFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dcd192df57524c18 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PhoneFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3be668cc8469694d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PhoneOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe33ea7da1b9391d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PhoneTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e816f94c36b84dc4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PicCenterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e60689b6e0dd90f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PicLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49b621e963034a34 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PicRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a6feb6e94c5cecf3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PictureFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #101e6e5b63b5ed4e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PictureOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61c4ee253506d5dd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PictureTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #387f6cd41442af57 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PieChartFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d411778cf74a3621 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PieChartOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b2934d6df6a0a192 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PieChartTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8bcabe4a82319e91 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PinterestFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5971f7f8b2072008 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PinterestOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d93cea7f4d15114f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlayCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea4ae4390af5861b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlayCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25adee84c52537ef — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlayCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #189f0ee255f2ad0e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlaySquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f3dce05cf91346a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlaySquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a43a4e7456c9ce94 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlaySquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74dce2eaded5dff9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlusCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49e5901ed81d508c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlusCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f67b1d5d236fb1f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlusCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b219d58fb4ae03b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlusOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e3e2bcb1e9df5d1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlusSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db552f2ff4c344ae — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlusSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c69ebd82cecb2349 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlusSquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5071b587215f2eec — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PoundCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d11457cb56e6e81 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PoundCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5742f169eec96cf9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PoundCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #67cb21d53bca220f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PoundOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #369f522cc304efad — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PoweroffOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc97c351814b57a0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PrinterFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #762fb229b03c23f6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PrinterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30d8da1126062cfa — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PrinterTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95b2cb9ab59693d3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ProductFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6188721202b93d1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ProductOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eba3bee0915102b9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ProfileFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f640ae05f140f2fe — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ProfileOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68f53e7509a70a96 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ProfileTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e8cf51383ad0363 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ProjectFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #00e0103a2c710419 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ProjectOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d93996ef90e242c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ProjectTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b5c7160bf60e91b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PropertySafetyFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ebfd2c996b90e20e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PropertySafetyOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e8dcef2c415872d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PropertySafetyTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a29f70baf855a177 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PullRequestOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #153c06416f50dd66 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PushpinFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f556ac0f34009d9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PushpinOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6880fd0d60fa6986 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PushpinTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0768bf90984efd0f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PythonOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef27f383cef933ae — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QqCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c2b31915c033c32 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QqOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d52f69d55fc7eda5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QqSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3faf8f5f243b41b0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QrcodeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fcf761e0dfdc0acf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QuestionCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81d87c03ac6ffc35 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QuestionCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a46b795696ee06b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QuestionCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b80141d3a0f02dbb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QuestionOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c6e3b94f281a85a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QwenFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #21e55ded142d672f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RadarChartOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b5e7596fd7d322a4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RadiusBottomleftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06041dc374f4a3d2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RadiusBottomrightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #121021755551f46f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RadiusSettingOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ffb863a55fcb66f0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RadiusUpleftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34fedc35471349ec — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RadiusUprightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b8ba8039067ed5a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ReadFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37509ed527ec5478 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ReadOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6b82ec71d3448af — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ReconciliationFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #225364559d574c7e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ReconciliationOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1518af3cff60eabd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ReconciliationTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c909409de0d3ea29 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RedEnvelopeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fdd5230c9841015c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RedEnvelopeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab755155e6d30506 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RedEnvelopeTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0520c63056a90a49 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RedditCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a7117d3c350c6f76 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RedditOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49dfebb38b71b3a4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RedditSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d250039281f3ba4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RedoOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b2052747f3a6f74c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ReloadOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd8259f4b3203ac3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ReplicateFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a60a6157b245b3f8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RestFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63b94a355c0c647d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RestOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c88c5f69710fd096 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RestTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f40e7935e173e830 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RetweetOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5952c6c9a30219b6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RightCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe1d55db1fb4d562 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RightCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d607868bf398a46 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RightCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93121d8c3d35cac5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef99b0f78bdd90b0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RightSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e51c909497413fd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RightSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ce80053ff261949 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RightSquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b857f52db3d05196 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RiseOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49851b47b3cee399 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RobotFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ccddd4077eeadea3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RobotOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e695a01cbcf90bc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RocketFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd01afc86839eb20 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RocketOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1fda15afe434790e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RocketTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #189a7fda94e90de0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RollbackOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f739121f16eb249 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RotateLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72e8bee7fbc156d4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RotateRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14226f0d36893e63 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RubyOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d939ae8322bac173 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SafetyCertificateFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a7be203774892105 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SafetyCertificateOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76862530f39ac955 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SafetyCertificateTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1319a27410e5c9f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SafetyOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5a2a2bd8923d1e8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SaveFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7bf6ca26db74e13 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SaveOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86322960f3219295 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SaveTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0fab8586ea42e87 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ScanOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #981d3f92f2160086 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ScheduleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #891182cc6e42982a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ScheduleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2188a7be7f6614dd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ScheduleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e6fdb4aac268f7b2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ScissorOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #241515dab43e768e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SearchOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5fa2c00d506a5a74 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SecurityScanFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b26ba32e95cccbf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SecurityScanOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b2df077f690497ba — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SecurityScanTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca8a440bb5e030ef — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SelectOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24d4afa780332c61 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SendOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79d3d8876e8042df — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SettingFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3f45dc9dcfceac2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SettingOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ad44375ab6c55e8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SettingTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3141039ba1d51856 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShakeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e05adea181b87d46 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShareAltOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a763a75188097f4d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShopFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46b204a4036d1b6e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShopOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2a934449a3d145d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShopTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1316f1c3ef1e46e9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShoppingCartOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #118b153187e009ce — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShoppingFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e8d29d4eb6689a17 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShoppingOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a23afe5c19e36fb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShoppingTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #143fa00816a0918a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShrinkOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1a6e8366311eeef — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SignalFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e8bd7958b36d549 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SignatureFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0772211f6304b9ff — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SignatureOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a25c27d73403b662 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SisternodeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #09f2c3ad73947a51 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SketchCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #511f264d3e06881b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SketchOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e927c303cbc74713 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SketchSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b55414980559e988 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SkinFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #499e0a23c2490429 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SkinOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db0560cb58fa4571 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SkinTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20f4d13e8e460ab9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SkypeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d0bd80b6d3dd3c4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SkypeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16f863be2e553712 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SlackCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0302feaa771f161 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SlackOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bdef8873946a003c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SlackSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a6d52f649ce79ab6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SlackSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #67a1a6f9e8b05a68 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SlidersFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f3e49b8ed2a1bed — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SlidersOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f581c61d554e8086 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SlidersTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35ebb2f449d308dd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SmallDashOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb33b922663c94f6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SmileFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c19f9efd861356bf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SmileOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1dedb99f55f2a368 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SmileTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5d2cbc82b91c137 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SnapchatFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42db91e06ef6e0b7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SnippetsFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c056205e99a4a7a7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SnippetsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2158745b315275c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SnippetsTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c0c7e12d5e879cd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SolutionOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48d3707ec264d5fa — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SortAscendingOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c24c90402365a38 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SortDescendingOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99cf2a668977a1eb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SoundFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #381a1faffa7b9184 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SoundOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #701f9ca58f897c0d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SoundTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #942c30e04fe1beb7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SplitCellsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc342d01d427844c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SpotifyFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e02cebd7cdad790 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SpotifyOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4b052bd7256f0ef — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StarFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47b54b1d47cf6895 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StarOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2936b732d4e2d607 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StarTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c70f608ef317b56 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StepBackwardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10d720fc864935dc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StepBackwardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fda61b3228e76967 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StepForwardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a4b612b31289e0e5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StepForwardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d998a40e4e003a3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StockOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28be3acf2b3e66fc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StopFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #09015ed980e7bc61 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StopOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #862213913adfb512 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StopTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b653f5ba3f7b10b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StrikethroughOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae86344d37ab5403 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SubnodeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c5d629933a141bea — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SunFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a96c4c581cea7811 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SunOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #53634abad2d1eb7e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SwapLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15c7b6125de7a83b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SwapOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae03b0d00c906b4f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SwapRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea333ae54ecf23df — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SwitcherFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db83b1437cd6fb36 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SwitcherOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50d1a7071f2a0939 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SwitcherTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a75fe5c650aabdf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SyncOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #453b8d58daf4f2b5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TableOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba37c42b4f0054c4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TabletFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3f3f7a9a1146227a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TabletOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f0063fba582307a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TabletTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06c758c415c5692e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TagFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de14a44b0aeb4ac3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TagOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b9be54996dbda92 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TagTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7dbbd95f0dc59003 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TagsFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e3daa2057d00b34 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TagsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3cdd1604f78beee1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TagsTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4473ece8e6661a18 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TaobaoCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f56222029efcd960 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TaobaoCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad895c58aef29a43 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TaobaoOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ea7e04aaff36c4e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TaobaoSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b5f3ae485d5d5b2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TeamOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3ef8b753ac9246b8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TelegramFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c111492a9555d576 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ThreadsFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b803ade1d2e7f7bf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ThunderboltFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63d6821c4b27b4b0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ThunderboltOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1930d353853cf831 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ThunderboltTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c916a423a1daf893 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TikTokFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9bc22038f5f1418b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TikTokOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c463998c76954818 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ToTopOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad420090d183d289 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ToolFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #432bef5aa73a13f7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ToolOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43143b5a95d74ba9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ToolTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a42d3d2cbcc79ae7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TrademarkCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #56072e126eb68ea1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TrademarkCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e34237c076f86550 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TrademarkCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be78526e74d3e358 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TrademarkOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57d185b80a943428 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TransactionOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63de27f9c4ebb8c7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TranslationOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d335eafd4a4dc73b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TrophyFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b98540b72e42e612 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TrophyOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e72089014f06c40 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TrophyTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #153255b2a0acc129 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TruckFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ab6f6a29f9b39c1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TruckOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c47c3efb03b68666 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TwitchFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10ea302a5f60c82d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TwitchOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #100ea939fe558e1b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TwitterCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4252fc3846a0b49e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TwitterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fed02bab74c28e32 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TwitterSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d70400f07c280981 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UnderlineOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea4487e597bd3e65 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UndoOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bbcd4587a2131ae3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UngroupOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3b2006d8aea289c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UnlockFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d4ad9dd22036274 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UnlockOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d21665947cc16c02 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UnlockTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a53b97d08d9b70df — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UnorderedListOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e159c3102bcdcd0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UpCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1cb09594edbef0a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UpCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #036f3698cd9bbbfb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UpCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a9e434d174f11a9c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UpOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c9c7c86ecad9af6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UpSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #debcdbedde7d6151 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UpSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d13cc0fc53894875 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UpSquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df79e09829b43f0f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UploadOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #286d5d74053d6cac — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UsbFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #505256c066fe1786 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UsbOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9eb13ba2e8b06f25 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UsbTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd7efce678ae5787 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UserAddOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d026b8ab4cdd356 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UserDeleteOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a3e132f0a4cf99cd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UserOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1fd7c2366f2b0611 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UserSwitchOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c5d8e6e8aeb5f66 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UsergroupAddOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d96f958bee957c23 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UsergroupDeleteOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d6408ec0b2ab689 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VerifiedOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #638e7d127a0f2dfe — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VerticalAlignBottomOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73ad5a1b2b62244a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VerticalAlignMiddleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1619df003108972d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VerticalAlignTopOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f4a0e14d1530254a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VerticalLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a38273109758c5cd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VerticalRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4732e1d1fcded018 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VideoCameraAddOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #afe89e9acaec25aa — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VideoCameraFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d42a8994f2ede60 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VideoCameraOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad870c262c80e691 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VideoCameraTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #285b2cecd3de5641 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WalletFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1f3957c03f0311e4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WalletOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #074461c42f3dedd4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WalletTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1f63fdfd80c62c1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WarningFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #372aab6dd782cbb0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WarningOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3715df076e814df — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WarningTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d109caf8fc152ddf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WechatFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8032531407e46ac6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WechatOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c195d83690cef4d3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WechatWorkFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6260b64f62ab2e68 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WechatWorkOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d5bc8ed3a7ad115 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WeiboCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a4955c770773d616 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WeiboCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1676c13f3c47b9db — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WeiboOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85bdd559c0b24ada — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WeiboSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e5fb973d6a2022b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WeiboSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5f1edc50b25fc06 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WhatsAppOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4de8772d0922801c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WifiOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c739b626a2054f4d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WindowsFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c5efda9943c70fe — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WindowsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d36384d55f06bbb6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WomanOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e859b23680aa80f6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/XFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2088a8ccf7907a2e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/XOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb89fbba8c72e416 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/YahooFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ede74999fcb12f05 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/YahooOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10c7af0a35fedf1b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/YoutubeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10ebd479df3a5502 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/YoutubeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5607e40f86ed649 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/YuqueFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #59965a61e65cfebd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/YuqueOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a42c2e9ec454412 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ZhihuCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97e2cbf58772d447 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ZhihuOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e3a972b29eb2417 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ZhihuSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1362f856d130132 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ZoomInOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0aadbb531886b69b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ZoomOutOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a0b451139bc916c — Environment-variable access.
pkgs/npm/@[email protected]/lib/components/AntdIcon.js:73 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6140e28cbc828bb — Environment-variable access.
pkgs/npm/@[email protected]/lib/components/AntdIconLight.js:59 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b81d9d0b564aa97 — Environment-variable access.
pkgs/npm/@[email protected]/lib/components/Icon.js:87 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3f4319e7bb34bd3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/cssUtils.js:158 
  if (process.env.NODE_ENV !== 'production' && typeof console !== 'undefined') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc1db994663093f5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AccountBookFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5cc544f346ca1b5b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AccountBookOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1265d334907a71cd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AccountBookTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b61fa81ded247ad5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AimOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #422c6935a774b585 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlertFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb1f9a26fac34345 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlertOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #747d97367b27ffc9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlertTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c2c680134584af4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlibabaOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7fd38882bb10c6cc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlignCenterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c7643b52f79b7eea — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlignLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9287822fbdf1cd33 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlignRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9fe777eaead5e2e8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlipayCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30eebee86b010e01 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlipayCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6422493fb9aa369f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlipayOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa991a985a5d6eaa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlipaySquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20ed51ac59b5dcca — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AliwangwangFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de5c6badb1ad429c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AliwangwangOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d01e7e1616afc0f7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AliyunOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #622efbba47e9403f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AmazonCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e17dd16a215f072 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AmazonOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5289deea57830369 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AmazonSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #59c593cafa27a7db — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AndroidFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #732a5c7c6a018b0f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AndroidOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #faeb6ffcca8d4438 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AntCloudOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94c2eea4923e5537 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AntDesignOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9584cb89dbe81edc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AnthropicFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0b111a41ab8a61c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ApartmentOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0973201adc14fc97 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ApiFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7df756891a31d2d9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ApiOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5eb69b3b7c4c894e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ApiTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0144d323ff5ba54d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AppleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d558813c92e1211 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AppleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #475c840ab0b5895f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AppstoreAddOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2faf313b75c5a2cf — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AppstoreFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #59c849699effd881 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AppstoreOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e82d5643b25cfab7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AppstoreTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34a8d49ed14b6c9d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AreaChartOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8eca0dbdcdcf8b3c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ArrowDownOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca0699416201ffc0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ArrowLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08aa9846065fbf4f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ArrowRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d70d378f59810ffa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ArrowUpOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bed690284bbc8265 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ArrowsAltOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62fd60d2c1d24164 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AudioFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7349e0d75c852d30 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AudioMutedOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2be083b15625dca4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AudioOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1930961403a63eff — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AudioTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ef23a219c433c77 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AuditOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #843e44370ef25c37 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BackwardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0fe77ebf4a735505 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BackwardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1766b58d48302b5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BaiduOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72c489714648fbba — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BankFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #802848790c2bcbcd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BankOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #39ddd797086f8c6c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BankTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a2c5e9047dcb0bb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BarChartOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #522a904408605bc5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BarcodeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #26b31811424a5ccf — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BarsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9003063206d0f75f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BehanceCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #747ec160b488c4ef — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BehanceOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe9fb777f2bd3f04 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BehanceSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ca6c46ba9b05ca4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BehanceSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f811e38b29a347ac — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BellFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1db9473ae5ef1966 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BellOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #185b79c8286fc0fa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BellTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #56067bb62bab7571 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BgColorsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d3607f608b44145 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BilibiliFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16c03a1d4506a75a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BilibiliOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #615096c40838f19e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BlockOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41affb928f83fdb6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BoldOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #711ae84d37a7b74b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BookFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49786b41444cc272 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BookOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cfcb71c0c98bdfa3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BookTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6d57912fa9bccf4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderBottomOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba2522a54d2e2401 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderHorizontalOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6875a7d7d7d4b561 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderInnerOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d67d7c3f5882a068 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d91b1ca980d87745 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderOuterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a006e7b2df5ae4cd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2686cba7a98d3526 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e38e994add98a17 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderTopOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c368fe7d542686fa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderVerticleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e62b03292b17869e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderlessTableOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b24be25475570647 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BoxPlotFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #108342e81930c12e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BoxPlotOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94442d73004f06ae — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BoxPlotTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e877d34efb0871b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BranchesOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0222fe95d35adc33 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BugFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b467f07b7efb25a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BugOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #919f281870447756 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BugTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76595cb4b516c8a1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BuildFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df175899f64852b6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BuildOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0fabad841452ab25 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BuildTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a3898834259d1b3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BulbFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6460e17cdde10417 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BulbOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #38a78e1d9e59680b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BulbTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc83f446fa186d5f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CalculatorFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #71e5ecb060d9f58d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CalculatorOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be8fb3c314555258 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CalculatorTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35b6374d87aec763 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CalendarFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81044b4d952c69c0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CalendarOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ecd5d661defaa518 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CalendarTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #625b4c11b6eb93cc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CameraFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #629ed40a1e285aa5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CameraOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa6c07276c335cb3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CameraTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b308f6e0a575c424 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CarFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9469cd250719452b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CarOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a39b0efd86c370b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CarTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45612339cdc6867f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CaretDownFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #985497e63fc74189 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CaretDownOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7dd2930d62fa5286 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CaretLeftFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e0c80403090fe9d4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CaretLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2127d944c9544eb9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CaretRightFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a1b98bee5a81384 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CaretRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df27be129543d689 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CaretUpFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6bbbb55761cb9fb6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CaretUpOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e69fdfa4eb4983ef — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CarryOutFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6519d301b7068e9b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CarryOutOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7bb22c3e78b43a7c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CarryOutTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34d158afbd142b09 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CheckCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be526f5919b1fc31 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CheckCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #064376b69aae7552 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CheckCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d131ee6b17acca45 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CheckOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9960f43aa14c2d83 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CheckSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f14f5198cc6b4928 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CheckSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41016bf5541c6126 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CheckSquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #21e083489bd59f55 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ChromeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6339e09b0d94885d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ChromeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b6595351a961fe2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CiCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d8f684cdf764cfa1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CiCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad459e658d118282 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CiCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3cff1ac1ce289372 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CiOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e56bc50f1caf57a7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CiTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e454038b75412602 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ClaudeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6bf16ef501b1b9a8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ClearOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b28db58585af9ab7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ClockCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #374ee033f7c03020 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ClockCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #59bbc407c57f157e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ClockCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #59c7720fecf3aa84 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloseCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a5843c31c84e1aa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloseCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #747f5514b8e34f85 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloseCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c2e7b777c64596e2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloseOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d1d8d6a6e3357d5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloseSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a225c480615528d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloseSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #048cea33918deec7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloseSquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50d356c2bf4fd190 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloudDownloadOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #596bd77e9451c594 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloudFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96cae10ac69c4f0b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloudOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48e3df6375cd988a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloudServerOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b00e30037b8852e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloudSyncOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95759f0abf785d66 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloudTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28a9201be7c5193e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloudUploadOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #893ed501c20e458d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ClusterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed191fca47aa2e5f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c3a19a25af5b237 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0c3406620d744dc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodeSandboxCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f4a5c594a09e0940 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodeSandboxOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6836ca7a8df83a4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodeSandboxSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97f743ae97981787 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodeTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b539aea8e459bab — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodepenCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f28caed05d12435e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodepenCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1bec5acb74d6accc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodepenOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fcc7959f5c491f0d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodepenSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e370eb1774b38c83 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CoffeeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ecf28334e607c9b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ColumnHeightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c4c61d9fd52660e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ColumnWidthOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c51295b28d5d7f2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CommentOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #26ecd91717ddfe56 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CompassFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c198964d291cd73 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CompassOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3d260abf1624ee4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CompassTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e23ec339a61aca75 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CompressOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aec2fa4b8a7afbd5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ConsoleSqlOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #834973129912d748 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ContactsFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7900d5861b4ce49b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ContactsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3ca8c92ce8f55cad — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ContactsTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd0886d065bd674a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ContainerFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d9675d3ede17c3c2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ContainerOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #269a9e89130dda66 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ContainerTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f249328bc4a4426 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ControlFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cfb53dc6a953ccd2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ControlOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0667f7d726c0da7a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ControlTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b2853d8fea340d4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CopyFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab63b2f88202478f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CopyOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1bddf0bcf6291b7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CopyTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d470ac3a35545eab — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CopyrightCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d69bc69640631740 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CopyrightCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca94ad794cf623ac — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CopyrightCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03d598ee13e787a0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CopyrightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #861e219b218912bf — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CopyrightTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #64c84d4d228262de — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CreditCardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b39632c8db126d35 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CreditCardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c98bfd9c573eaa7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CreditCardTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #38f24983fb590a9a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CrownFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e962c00a39cba1d6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CrownOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94a947897fb7abd5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CrownTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #866510a57434dc0e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CustomerServiceFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68bd401c44357ad2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CustomerServiceOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c4d314b1f2a063e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CustomerServiceTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a75aaeb4a49eb56 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DashOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b04a7726661005a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DashboardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #911fed19388355ec — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DashboardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84a95a2713bcf4b9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DashboardTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #faa2562f717fedff — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DatabaseFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f64f8974fe12be6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DatabaseOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81d2fabcffbb1379 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DatabaseTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #19382cb86b488275 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DeepSeekFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d412086fb623330 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DeleteColumnOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1885cd10166c7cdc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DeleteFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c2f7168aac79b1eb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DeleteOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f0d8f182d9d5aa1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DeleteRowOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3bcc92c381d1f286 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DeleteTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b93bc1fa9c7b75d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DeliveredProcedureOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #54735c44c351b7cc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DeploymentUnitOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb19408d27a421e3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DesktopOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6028ebe6877c67b3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DiffFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bccd7d1ca216a7c5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DiffOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96e94aad8a117c53 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DiffTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a08c1eddc197966 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DingdingOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77f420691b989b79 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DingtalkCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b457346f0e589d53 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DingtalkOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01fc483a821a823b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DingtalkSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79c6c302b61e4987 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DisconnectOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #915bcc4a2a312ad2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DiscordFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #82aa8e8d3d34f075 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DiscordOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #386bb9c713802172 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DislikeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #911f932b6d5ee824 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DislikeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff18192655c2eba8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DislikeTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7eeddb178ec7ce49 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DockerOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #225472819898ecd7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DollarCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8766eb084041b51b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DollarCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #323678a7a01be44e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DollarCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a06cd99601f72ff6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DollarOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f515c43654bdc31f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DollarTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62509d343097bb01 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DotChartOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc9d1bd13b4f833c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DotNetOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14842a1f61a71502 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DoubleLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #809bc40df0dfb3f0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DoubleRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f72dd53bf79b2094 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DownCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7764660dbdaaabe — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DownCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #38661da34c8d0731 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DownCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8fc2bf20fd32d47b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DownOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #977cdda5f3a7eb28 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DownSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd71d4d551100f7a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DownSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b09ec9f86550b1dd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DownSquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b5593ff089af9bd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DownloadOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5189008b49884013 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DragOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c033e423b4aa0b32 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DribbbleCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8901d3311113a8bb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DribbbleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28e0452369d18860 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DribbbleSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4be73cf0a3f6b2d8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DribbbleSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69e066e89650c73d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DropboxCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4cd21077ea87b55d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DropboxOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eefdd1d499423363 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DropboxSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fab1320e4dbb49d9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EditFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bccdc41ab77e7624 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EditOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4874a0f8cba01eb3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EditTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4e3369c1d6bb562 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ElevenLabsFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18a82b465ee97e70 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EllipsisOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #821c95cc7664b510 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EnterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1255bd4cb184205c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EnvironmentFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46ffc74bf9e1c428 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EnvironmentOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1750f1761157f69c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EnvironmentTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3eeba20b4b7b343e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EuroCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d3925a68b59c862 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EuroCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #70e59a8ca8a22d67 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EuroCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0965fd5419c701b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EuroOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c272f5e0896f93b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EuroTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5bb4063d0958479 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExceptionOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d2962687ba24b83 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExclamationCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ecbe4c19d7e0dd4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExclamationCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1aeec4a24b11da4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExclamationCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac8c1ae9fdc6fcbc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExclamationOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5790b54dfafbd054 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExpandAltOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8332a8883a5eac1c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExpandOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #040fe612ae6f62cb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExperimentFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eea9125935910084 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExperimentOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #719b290a7c8624e1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExperimentTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e6996a5f92c7951 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExportOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16fd8cb52b601b39 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EyeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #410aa0e4562edae5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EyeInvisibleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8190c202152bbcbd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EyeInvisibleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c678ca28b1f8dc07 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EyeInvisibleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9640056dc6bcf107 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EyeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3edada38b2c28596 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EyeTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a751ac904c731b7f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FacebookFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cff88160061436da — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FacebookOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b17be824af5722cd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FallOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea059ee2a0d0fddf — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FastBackwardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c85d40a7d9d333e0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FastBackwardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6ad65b16ff34ad0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FastForwardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6fe9bb6d627261d1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FastForwardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee0518de397bf0f2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FieldBinaryOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #afc669fee446e661 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FieldNumberOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3b5b7803200a46b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FieldStringOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f63899150b04ac5d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FieldTimeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02abce2b1ced6762 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileAddFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7bb8986599f2be89 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileAddOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7887c6fa1895959 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileAddTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #099b67304f490139 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileDoneOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #426b06e63f7da90e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileExcelFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9907e5e908906d12 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileExcelOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5124831b8c59047b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileExcelTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f6807441b7bbe65 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileExclamationFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28020401a23a7e8c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileExclamationOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da6c93ae5af628dc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileExclamationTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e2729998733b9f6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #072649f4d04fea52 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileGifOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bcd874c67933cb20 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileImageFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad81f629fd75528d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileImageOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02554041daed49b9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileImageTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5472937df6d1f742 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileJpgOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #346c77ee95596799 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileMarkdownFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6d6f486bc0ca4d7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileMarkdownOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4028323195cccfd3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileMarkdownTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b7bc5ecad3d2089 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51223363de51421c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilePdfFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e067e1e4647c0975 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilePdfOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b9846fd06cc44ba — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilePdfTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18ccaf008f215e7b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilePptFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #490942400d5b20cd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilePptOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a85b9ec3d2cd2762 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilePptTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0dad41db381873e4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileProtectOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b30dce2462bfe2a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileSearchOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #71fc0d05fdf92822 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileSyncOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c2ca5c351cc88ae — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileTextFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f9d9b7ee23a634d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileTextOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e2fb77f29422252 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileTextTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0da2d7dfd929fa10 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4826ddd6dfa23e0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileUnknownFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #09b8b7c3c8405bc2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileUnknownOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35a4d6cd5f3eb0fc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileUnknownTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a16315a4ee2f6b5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileWordFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db0b7c6f87c6f099 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileWordOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c016b74c86f9a572 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileWordTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f91bd6c3bd81fb55 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileZipFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f30556ffbdc8f56 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileZipOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86304181e5767b03 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileZipTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a3987bcc0706a89a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilterFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e4432d6c4898731a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25a2ad7ca6b8318f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilterTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e7c6eb47e77c348c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FireFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #daa76f3b0ca8a459 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FireOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e21ab1f70e779fe8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FireTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93943a1c04306ddb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FlagFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e5a60a2da2880aa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FlagOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #192ad499285f7bc8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FlagTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad92229ade61fa3d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderAddFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce9f3dcfc9d40cc6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderAddOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a23b0823820dfd35 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderAddTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72a91eac50dc4fbb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fcac4fefac985091 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderOpenFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #411b5638791e35e1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderOpenOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10d1e65f50cfa6e9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderOpenTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2f092163d6548b6d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d04cae584f5adcdb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d4ede51904f0e7d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderViewOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb66aec11091eec2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FontColorsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b80dca67133fed4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FontSizeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b89d0de25a71284f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ForkOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3ceaa36511c3565b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FormOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6fc48e05c4d1cb97 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FormatPainterFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e818720bf3ed9bbb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FormatPainterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b64f62044f05db86 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ForwardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e32d3382351d45ef — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ForwardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7530c78c8fe85c3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FrownFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a939e7b66e63e550 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FrownOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05d65961df5d215f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FrownTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e900d05924706796 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FullscreenExitOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1746da775bfb6d5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FullscreenOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1580f75fcd803aa9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FunctionOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1d287208a6f8999 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FundFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c5af91659494d0b1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FundOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7016e75c84aad719 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FundProjectionScreenOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e363354ed966e87 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FundTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e6133a76941ebb9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FundViewOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9b75ec021a6cc4b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FunnelPlotFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75c29ab9a2267031 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FunnelPlotOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8c9f0999c199811 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FunnelPlotTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #38220021c7fd0e38 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GatewayOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #670d4ff863150056 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GeminiFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75a684aa34fdc308 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GifOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #166319f862a7ba2d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GiftFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac2a88f3ea16c15c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GiftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0118d57c72d8c726 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GiftTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #189485e15db64681 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GithubFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52a7a5759f01c5c3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GithubOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66dc80ef5316daa6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GitlabFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #358c9e88174d3b68 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GitlabOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0621c20dbedf7803 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GlobalOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90443307515d3927 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GoldFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06cb36882b253286 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GoldOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37281c4900ff8c1c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GoldTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #87c015b23e45f32c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GoldenFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e054e848e507f25b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GoogleCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8202567d11d63a3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GoogleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa96f963b3fb8469 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GooglePlusCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93b19d1c65349b66 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GooglePlusOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b2f41fbefb8e92e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GooglePlusSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c40af7077ab9d62 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GoogleSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #23dfaeb5d2d39daf — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GroupOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e8e19e383b3ad6c2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HarmonyOSOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f9a3e2a219243f3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HddFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2454163e46453e97 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HddOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8432ca71da38a008 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HddTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d895d09e0aa19ae — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HeartFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e879c197ec35bad — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HeartOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b530612a47ea95f9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HeartTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #965a833e51dd2dcd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HeatMapOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #07add7f6da05140b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HighlightFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b105365a27f30ac — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HighlightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #358fc0ef2f3a05c1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HighlightTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50a21fdfe48c32a0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HistoryOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #31231507b8afb2f0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HolderOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e6318e62f3f2a165 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HomeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3cf745422d53a043 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HomeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d385d1055c864e7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HomeTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2dc2d1523afe5b16 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HourglassFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5225ee8a735d4b47 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HourglassOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14d5f3e8ebf4fc50 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HourglassTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14e5307e46620fde — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/Html5Filled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99ab70fc0cefe101 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/Html5Outlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37c1c3aedba0c4d9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/Html5TwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24525f54c2ec727b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HuggingFaceFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36eb952ae752d205 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/IdcardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f7f308e508a6dae — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/IdcardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea2dd8b7573ee267 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/IdcardTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f4dfe073d0770de — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/IeCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c815df22909ff7ce — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/IeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #795cc5377d8fd711 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/IeSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #92d1da15ebaf8a8e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ImportOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ff56a65cf2e32cc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InboxOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d42c41f72436999 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InfoCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa1bd356d552b56c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InfoCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1199cea75e61d73 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InfoCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #26d3647321a5f2df — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InfoOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6692480f2d4c1182 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InsertRowAboveOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e192e1e0ce14449c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InsertRowBelowOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd3a95bdf829684f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InsertRowLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18291e10099d906d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InsertRowRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a40b36e38556f41 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InstagramFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3aad00e3b6ea570b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InstagramOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06f81591c233f860 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InsuranceFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #196b9c4d62bb11d6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InsuranceOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #70779d7c124204d2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InsuranceTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd93f463b2173d15 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InteractionFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d31232986ebf0f5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InteractionOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb482fa62fe89b85 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InteractionTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d5e2a932ea8b48ba — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/IssuesCloseOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84e568efaebee678 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ItalicOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c44f742b9b2fa49 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/JavaOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f66984627491abd8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/JavaScriptOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77c6b654bd6ffd6d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/KeyOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #540d14253adfa1bd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/KubernetesOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abd0d0d26a156402 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LaptopOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af5955e3f8e87f74 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LayoutFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #666afc016e320a48 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LayoutOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b1ebfba15097d2ca — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LayoutTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be3b8b0a0d364a27 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LeftCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #beb7106cb7ebcf3b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LeftCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c64541a6fbf9bfec — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LeftCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d613338007d861f4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1bbafb692defd5d4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LeftSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fea85d48a192693d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LeftSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81a32cf5e0cc9065 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LeftSquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9cc87685288d60b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LikeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ebade01106448b18 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LikeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ac437fdf09ebf15 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LikeTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d377e955cb0a200 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LineChartOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22a550dbad5351bf — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LineHeightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac56684b5d7f5c6e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LineOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b1b0464ba1445bfb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LinkOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3dd8490027c42da4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LinkedinFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b8a613fef34d9c7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LinkedinOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c51214dc3103786 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LinuxOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a79c42a4e140bb8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/Loading3QuartersOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c3afd90ec335327 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LoadingOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db1c7a4914985e00 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LockFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #edef91bf40906974 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LockOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #80318e8165f337c7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LockTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7a397cddebeb84c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LoginOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e629f01d924c0992 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LogoutOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3f4c3684d46aeea2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MacCommandFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #054a1e84db2d4a27 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MacCommandOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d54fa3df61d6cad7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MailFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4409332e954ffd01 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MailOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd192e2ee0933ca4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MailTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #593c643568b38362 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ManOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1f2ca5ee91bcc19 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MastodonFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e876ce55a35b53b7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MedicineBoxFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e3f36e140387a42 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MedicineBoxOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dfc72afafd39482d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MedicineBoxTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7beaec7b58ee1e45 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MediumCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7e67b71cb7619f4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MediumOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b50708a2c7cf776 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MediumSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ec9549b002f6276 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MediumWorkmarkOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74bdc48b9cbac5b0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MehFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #55892b8eb3387ae8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MehOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d7665cbba78cc3d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MehTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e68660d1675d9d5d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MenuFoldOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd46d00a6033b640 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MenuOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24ae081c1255e3ec — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MenuUnfoldOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #473a5836cd7cfd55 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MergeCellsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c5d4a003072e6af — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MergeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #453d0498660c7c7e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MergeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17200ad12cc9e99e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MessageFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06c9568b9cf2c09c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MessageOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #56ff1c767eec65ee — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MessageTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cda81d2d4ac95ab6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MinusCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1be45274ceff0534 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MinusCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d642e87955c80608 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MinusCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3f571a15e569f623 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MinusOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13c654ea8e8048e0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MinusSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce3c18d92b3350be — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MinusSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52055300c3d5420a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MinusSquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a7cfae4ad82673cd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MistralFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc595b48aec118b3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MobileFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f489b167a3c5fe5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MobileOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #157c2246ef7542e5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MobileTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47758bdc91b851a7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MoneyCollectFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c26d3d97d2d09acc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MoneyCollectOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6938f4d0d5ee5adf — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MoneyCollectTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d5ee02d851f10c6a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MonitorOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b90c4364a52bf46a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MoonFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66756cc3ad824ad6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MoonOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #117bbcaf1cf01216 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MoreOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #614c8604d70890db — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MutedFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18082798df62442f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MutedOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72c5fb7f0dcf7fe0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/NodeCollapseOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb37abf4b84c3fb6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/NodeExpandOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #405b74cc70e7ba77 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/NodeIndexOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57e9e8fb7f56a51d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/NotificationFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c3cad24cf7fe322 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/NotificationOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5370092c86fabd17 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/NotificationTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c0152dfd9d077c8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/NumberOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #427845e7d6c3311b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/OllamaFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e57a4add8c092694 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/OneToOneOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b730e0e8ee79a99a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/OpenAIFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e795b09f8f352e54 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/OpenAIOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0e6e8eb3b176ffd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/OrderedListOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6af2801f6b4ae0d1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PaperClipOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5f4f85153dd885c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PartitionOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3973c02bbdda01b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PauseCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03c558b9e8e0ad4b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PauseCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a80858600467ac16 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PauseCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e81882481c318be — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PauseOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dbdf6063430fe7c9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PayCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98bac74f359080de — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PayCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce6dabaaa0df815e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PercentageOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6298730e74572db9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PerplexityFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f6554bbde026685 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PhoneFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b07fc28549db4585 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PhoneOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d07d076cab20ff0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PhoneTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f84ad2d3e8cdf527 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PicCenterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe784bd1df12a56e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PicLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d25ebe130785bdca — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PicRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4361d2242b5ab87 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PictureFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #551f9068e91b4051 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PictureOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f4c3e526b7c8c75 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PictureTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43c6aca395473e1b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PieChartFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1cca8022a334cbc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PieChartOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6451dce3ec03c2d8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PieChartTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #112f4a2a1280dfdd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PinterestFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #872030266d76d9c7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PinterestOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05ded35b918e4133 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlayCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5564ae11b89c098c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlayCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aae9a592c0dffb16 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlayCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66ec15380013c8f6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlaySquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1c3e3eeb5e35092 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlaySquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a800b707172c0e41 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlaySquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e849a076a84bb3c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlusCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #639d6670f236b3f7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlusCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fda6ae14d5d54a99 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlusCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #efcdee8ad038cd1f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlusOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3aa0ab41aca52ce — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlusSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86777f249162529b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlusSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #052f27de4e8db762 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlusSquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b524035c68585cda — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PoundCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5df91a5a40982f3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PoundCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1fa1b807686403e3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PoundCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03d0ce42959f6c1f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PoundOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44accd644d0fc5b1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PoweroffOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b555768c507a25aa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PrinterFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74a7b1697eacb7ce — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PrinterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac70ef4db43b18ce — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PrinterTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1832f8d8a742d952 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ProductFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae55318f08eb1ba9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ProductOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d72c003feb399bc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ProfileFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb424ce1013ad589 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ProfileOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abb5e7a67c8fcb6c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ProfileTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #19b39a2b7b020a78 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ProjectFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c636a0af4c07dc8f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ProjectOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57c46c9a41a8abbf — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ProjectTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #103f1998a68a17ed — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PropertySafetyFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f54aa3c1e860b4f6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PropertySafetyOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef9d7631846db53a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PropertySafetyTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee5017e422f9dd76 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PullRequestOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6c88ff07610219f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PushpinFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f02d984d0fd75118 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PushpinOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1c00305014b2501 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PushpinTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14d7c5aa443814ef — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PythonOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66fe00e6130b94b6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QqCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e477ab2f9a9de799 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QqOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49a67a4b287cd0e2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QqSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b80b1e3dfc819fab — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QrcodeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a23ac89eab395d61 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QuestionCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa12716190e5880a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QuestionCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3669394b3994f360 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QuestionCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e1651436ef76213 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QuestionOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc2053b3e4aa437a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QwenFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c48b0271b94e7718 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RadarChartOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2f5c33a19859d613 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RadiusBottomleftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9019c1be95fcbb80 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RadiusBottomrightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #31409ee31af97add — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RadiusSettingOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #59041a544734a5fc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RadiusUpleftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f36dad4e9e677fb4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RadiusUprightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4cfbfe0fc74d0315 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ReadFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e7afe1334794893a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ReadOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #399fa90ef11763aa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ReconciliationFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #54652b49cf84f8cb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ReconciliationOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93ce7be4b973aede — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ReconciliationTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #83030aaa89529062 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RedEnvelopeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dec5d542e97b9166 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RedEnvelopeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5260404e27b26919 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RedEnvelopeTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9055e85a11a7126d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RedditCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad9eec4997bb967d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RedditOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7eb57bf87a77e081 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RedditSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c753b81fd13b689e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RedoOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90d16d923d89dd9c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ReloadOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #336b4f8a97c1b062 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ReplicateFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd8e2e367d666f68 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RestFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3eb5bb05fd12a383 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RestOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc686ffa81760a46 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RestTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8dffceaa988a7aaa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RetweetOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a23d391d85324a38 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RightCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a770561e436a14ac — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RightCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb9092aa9f2955b8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RightCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #daeab59532d3a0b1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #135c38eeec974756 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RightSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #897fda76d358f771 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RightSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93567e8d00c82b48 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RightSquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e56f6a097f22a838 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RiseOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9a9eb4ad03cf21b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RobotFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4273a74d06644f3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RobotOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa30b4f1aebf79e8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RocketFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b52aa7276631ea7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RocketOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6ba9378a56e74ad — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RocketTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #82622d5d776a619a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RollbackOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #359a0aefbcd75872 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RotateLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4adeb45912625062 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RotateRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17b3dfd64e05963a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RubyOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bd4a410d7d27f9d3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SafetyCertificateFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #256be670f704adb6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SafetyCertificateOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1095b91d1ce0607b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SafetyCertificateTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ff9435fd517fcc2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SafetyOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0df537b1dcb2903b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SaveFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #799490da13216ba7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SaveOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74534d69fb70bfb1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SaveTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3ba7a772bbcf7fe — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ScanOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1cd723b4ddcbd7f4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ScheduleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d34e7baaad04e4c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ScheduleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41a548c29b2eccfb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ScheduleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #501782c0e5d7d103 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ScissorOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04828658fb6e45fa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SearchOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e39da5289b9fc90 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SecurityScanFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2612abad5e5a2c2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SecurityScanOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #512a7b4f63bcd4fa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SecurityScanTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1daf8f0208b5f16a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SelectOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e7ba6f5adac8721c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SendOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9a73f518e9e6a1f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SettingFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0db4dfa6250d5c56 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SettingOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #552300dd2ee39469 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SettingTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b89526c7635619a2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShakeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5a30afd184c01f6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShareAltOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b823c4773548cf5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShopFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c51de1b5a9de2f5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShopOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d123f693435934a3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShopTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7c74a38743d9326 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShoppingCartOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #758aa5f42d1d38a5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShoppingFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #646f05d4a64b88dd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShoppingOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d2420735d3cff17 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShoppingTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8a01971864bdd6d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShrinkOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #630080d285958a4f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SignalFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81bdbbfc6bdce109 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SignatureFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a06814dba13db3de — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SignatureOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d016c7ddfae92fb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SisternodeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c180c176d88f55e5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SketchCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45eb775f6bd48ce4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SketchOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b6c85b89e45f9b1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SketchSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ca7213afd12b3d2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SkinFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #56436b0e930f44b7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SkinOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ccab81094850bdcc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SkinTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #38f6b43dcfe35d2f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SkypeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f4edb3f1c201dfe5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SkypeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c556fea9364b164 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SlackCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cff77aa58d28bbda — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SlackOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5244d510d5e07e9e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SlackSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9caff9f6f787dfc4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SlackSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2cc147e036bb5a38 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SlidersFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d3e362282ec492c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SlidersOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c98866aa59f2895 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SlidersTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c5317f8d65b333a2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SmallDashOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #579dcbf9a22051bc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SmileFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a2334b324500d6dc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SmileOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7082607174546e36 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SmileTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa67a99f24ea3ab8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SnapchatFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68ab3ba78078c95d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SnippetsFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89a32880bb55450f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SnippetsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c793c341b8df024 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SnippetsTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe8a4e52dc763301 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SolutionOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #09e58ac2c545aed6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SortAscendingOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85c873f575e5c166 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SortDescendingOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc67ffd92572f83c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SoundFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46a3d5dd19f474ad — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SoundOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d073c54c0b04018e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SoundTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a2c28031a6e4438 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SplitCellsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac6514193e09eb1a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SpotifyFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48557f59ace891f1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SpotifyOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4398b51b02d1f14a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StarFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c28925aa68b5bf5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StarOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10612affb53760f0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StarTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bbc92e5ce915b24c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StepBackwardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13c1f5a88a49c8fe — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StepBackwardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41d23f04417fc097 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StepForwardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76e8d7190e8be7e6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StepForwardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6fa6b4cd3f060378 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StockOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dcb79fe2a019771f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StopFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45c090b24ba1ff5c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StopOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce9b2f7026d6a5f9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StopTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abc1019084d1ac62 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StrikethroughOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6b72de668b4e171 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SubnodeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47c918945c9e8f1b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SunFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db1313076c79ef7b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SunOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e430b92acfb103b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SwapLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8f92f60468c5fe7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SwapOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43eda8d2e8b0ed65 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SwapRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #309108eb944e758e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SwitcherFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3dd5e9346f911e25 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SwitcherOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a9d444ed114c01d0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SwitcherTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72b4e191d3db8034 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SyncOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #290accaafe143903 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TableOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d722f10dc885804 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TabletFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #905d152e5a01bd8b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TabletOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d059704d2fe8bf8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TabletTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #061776b733b4c45d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TagFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7bf56d38374fd504 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TagOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f790e04a436cd5b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TagTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d54b9ec3fb23fc05 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TagsFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #814aaeaed93fd411 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TagsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d92ef4d481d99c7a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TagsTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2983be97bf2a5a70 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TaobaoCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5483901bb744a20e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TaobaoCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9aa4a0b9d130fd3e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TaobaoOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #242707e611d898ad — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TaobaoSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2659c654dd0c6791 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TeamOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e3eb0499bec022e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TelegramFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6fca7877c54432cb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ThreadsFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1624375a5af2d31f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ThunderboltFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45d4d24e06c07cbf — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ThunderboltOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c5225ddbe1c7f6bc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ThunderboltTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #80ec764002134c7c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TikTokFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb599ae1e0a153d9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TikTokOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5727ac817086dadf — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ToTopOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10f99c99a17e0a3e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ToolFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc973a72e4f1f36b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ToolOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37afd1a241d3a15a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ToolTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6db09b2881f9629f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TrademarkCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1186b9ec845e9c11 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TrademarkCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #781277e0c06f8fde — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TrademarkCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45734c41e0ac4251 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TrademarkOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #882cc5ab9d222e3d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TransactionOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9aefe3d6a774bfc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TranslationOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1dd74e390d2bd58b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TrophyFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #183decc67b0cf648 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TrophyOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc9a2fc58be5dda4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TrophyTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #513ae0dd1159b707 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TruckFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d44f17fb69c195a6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TruckOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b9e8a4d4941c559d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TwitchFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #70fbd547380393c6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TwitchOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1bcb07475e8bf179 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TwitterCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0bd1a56de94d68d4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TwitterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16811c6709fea8f3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TwitterSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1c085ada5d020e4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UnderlineOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea6537cd5351f412 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UndoOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4fae8cc4c7f7be42 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UngroupOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1bbc9296c9e5c3b1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UnlockFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1352acdfd3c908af — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UnlockOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4e87c269d3ce05e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UnlockTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9137810e877bb8e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UnorderedListOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e837d40c5e5d631 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UpCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4642f514fe5e9c6d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UpCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c61d399983564ff — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UpCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e5b3c3a3ce022fd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UpOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c3e30a2ba54a428 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UpSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d305aea69fb9d83 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UpSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c34f5644b992abb6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UpSquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5ef65e9e578f4e9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UploadOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6117091c086cdbf6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UsbFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc5e1a47262ebbe3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UsbOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1087d3d94ca20ae4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UsbTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ffb50d6f02a8d21f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UserAddOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72ee5bb7a76e4340 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UserDeleteOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b35fc17100bdb3bc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UserOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6ec820d2a27f3f4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UserSwitchOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d607de6f0e28d11d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UsergroupAddOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ce4a0ebc09a3b56 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UsergroupDeleteOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0418d2a5922bec19 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VerifiedOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47422c1bc90170c9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VerticalAlignBottomOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c682999375740761 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VerticalAlignMiddleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0280b239a584c739 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VerticalAlignTopOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8576da651fdd8cd9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VerticalLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #708c724261d96061 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VerticalRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e10c7758311bf414 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VideoCameraAddOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0107cf4d81700a31 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VideoCameraFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a74abf48512a725 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VideoCameraOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #389e31c002b864b5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VideoCameraTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d803e35a6252133 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WalletFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f62b47fcdcf2046 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WalletOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc03b60be7c1d26b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WalletTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ce4ec82b104e543 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WarningFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e11422c189868c2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WarningOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5008e9a4bd801291 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WarningTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48db9c68ce59188f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WechatFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7759f6c8a681255f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WechatOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad0c1ee3f488e7b2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WechatWorkFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0b15732481cb4fe — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WechatWorkOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abbd59f5b1d01fd2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WeiboCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ac7e2b148b6490c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WeiboCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c65552a64555c074 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WeiboOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d70c0ca61456123 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WeiboSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5de4623fead0add7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WeiboSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9734a49ad5ae0e40 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WhatsAppOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e7542b2bae1694e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WifiOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9dd28f555611238f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WindowsFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #653d17006f20df87 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WindowsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1977ce366e051b19 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WomanOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75ea9951a8636a6d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/XFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61b2041283c75a91 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/XOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3248d28ac8bab83b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/YahooFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #333057e5990089bc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/YahooOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4529a4f114d8f7c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/YoutubeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6e6385d52c7719f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/YoutubeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c8589064c94c0d8f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/YuqueFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1fee9c07d6412f64 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/YuqueOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2eac2e8f5d8a72a2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ZhihuCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a7aa50cbfad610d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ZhihuOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f590cc5cba18d2d2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ZhihuSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #069d6a254becedd3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ZoomInOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb075cd89e8457a3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ZoomOutOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@anthropic-ai/sdk

npm dependency
expand_more 44 low-confidence finding(s)
low env_fs dependency Excluded from app score #c8379321520167c3 — Filesystem access.
pkgs/npm/@[email protected]/core/credentials.js:110 
        configRaw = await fs.promises.readFile(configPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5287889a35471e00 — Filesystem access.
pkgs/npm/@[email protected]/core/credentials.js:210 
        raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df3f1e20db83e58b — Filesystem access.
pkgs/npm/@[email protected]/core/credentials.js:308 
        return (await fs.promises.readFile(filePath, 'utf-8')).trim() || 'default';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f467c55a073e88d3 — Filesystem access.
pkgs/npm/@[email protected]/core/credentials.mjs:73 
        configRaw = await fs.promises.readFile(configPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c017f29258036a40 — Filesystem access.
pkgs/npm/@[email protected]/core/credentials.mjs:172 
        raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5976585b2713d229 — Filesystem access.
pkgs/npm/@[email protected]/core/credentials.mjs:268 
        return (await fs.promises.readFile(filePath, 'utf-8')).trim() || 'default';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1f1b93030c7c8d84 — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/credential-chain.js:203 
            const raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85915dadb0c5a75f — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/credential-chain.mjs:166 
            const raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96610f08a5428e61 — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/identity-token.js:51 
            content = await fs.promises.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a990cd2def4127c — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/identity-token.mjs:14 
            content = await fs.promises.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce407fdbad028934 — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/types.js:195 
            await fh.writeFile(JSON.stringify(data, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a6aa04a90a1716b6 — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/types.mjs:154 
            await fh.writeFile(JSON.stringify(data, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9030a3fc0f188bb2 — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/user-oauth.js:56 
            raw = await fs.promises.readFile(config.credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c79e9654bfc9d9ba — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/user-oauth.mjs:20 
            raw = await fs.promises.readFile(config.credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #741afe809670629d — Filesystem access.
pkgs/npm/@[email protected]/src/core/credentials.ts:154 
    configRaw = await fs.promises.readFile(configPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d37c729d8923567 — Filesystem access.
pkgs/npm/@[email protected]/src/core/credentials.ts:258 
    raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1842d5e33dd60383 — Filesystem access.
pkgs/npm/@[email protected]/src/core/credentials.ts:372 
    return (await fs.promises.readFile(filePath, 'utf-8')).trim() || 'default';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #018f0a7d25e16aa3 — Filesystem access.
pkgs/npm/@[email protected]/src/lib/credentials/credential-chain.ts:250 
      const raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #191acad2531ec27d — Filesystem access.
pkgs/npm/@[email protected]/src/lib/credentials/identity-token.ts:17 
      content = await fs.promises.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abb20136ff648520 — Filesystem access.
pkgs/npm/@[email protected]/src/lib/credentials/types.ts:222 
      await fh.writeFile(JSON.stringify(data, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22b24147b77455d7 — Filesystem access.
pkgs/npm/@[email protected]/src/lib/credentials/user-oauth.ts:45 
      raw = await fs.promises.readFile(config.credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #4bc45cfa2bbd596d — Filesystem access.
pkgs/npm/@[email protected]/src/tools/agent-toolset/fs-util.ts:112 
    await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #b64306df4bb40ea3 — Filesystem access.
pkgs/npm/@[email protected]/src/tools/agent-toolset/node.ts:457 
        data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #659f7f6453877a31 — Filesystem access.
pkgs/npm/@[email protected]/src/tools/agent-toolset/node.ts:533 
        data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #67e47bd96ec87d2a — Environment-variable access.
pkgs/npm/@[email protected]/src/tools/agent-toolset/node.ts:806 
  const dirs = (process.env['PATH'] ?? '').split(path.delimiter);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #7c1f8289e97383cc — Filesystem access.
pkgs/npm/@[email protected]/src/tools/memory/node.ts:4 
import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #74073a791dabf58b — Filesystem access.
pkgs/npm/@[email protected]/src/tools/memory/node.ts:52 
    await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #ac9f2f63b0f2907b — Filesystem access.
pkgs/npm/@[email protected]/src/tools/memory/node.ts:101 
    return await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #60d8e2d191d15143 — Filesystem access.
pkgs/npm/@[email protected]/src/tools/memory/node.ts:256 
      await handle.writeFile(command.file_text, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #65b24bc90ffe99b1 — Filesystem access.
pkgs/npm/@[email protected]/tools/agent-toolset/fs-util.js:115 
        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #37438dfaa9680e27 — Filesystem access.
pkgs/npm/@[email protected]/tools/agent-toolset/fs-util.mjs:107 
        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #18f05b13537bb1f8 — Filesystem access.
pkgs/npm/@[email protected]/tools/agent-toolset/node.js:390 
                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #a964076cb10ef473 — Filesystem access.
pkgs/npm/@[email protected]/tools/agent-toolset/node.js:469 
                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #15f02c8fb7dc2f59 — Environment-variable access.
pkgs/npm/@[email protected]/tools/agent-toolset/node.js:755 
    const dirs = (process.env['PATH'] ?? '').split(path.delimiter);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #759e4d178048e3bd — Filesystem access.
pkgs/npm/@[email protected]/tools/agent-toolset/node.mjs:375 
                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #b84c5ec9a354d304 — Filesystem access.
pkgs/npm/@[email protected]/tools/agent-toolset/node.mjs:454 
                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #09e81893ff0ea2bf — Environment-variable access.
pkgs/npm/@[email protected]/tools/agent-toolset/node.mjs:740 
    const dirs = (process.env['PATH'] ?? '').split(path.delimiter);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #2663c152048c2e72 — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.js:43 
        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #150c58c01689eca3 — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.js:91 
        return await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #246eed57e7b95317 — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.js:213 
            await handle.writeFile(command.file_text, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #bb65ebeb0a84ce9e — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.mjs:2 
import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #777a7a0f5b794f1d — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.mjs:38 
        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #ac87b05c2e766f51 — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.mjs:86 
        return await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #da0311e354f64497 — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.mjs:208 
            await handle.writeFile(command.file_text, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@azure-rest/ai-inference

npm dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #19bbdde701f2b141 — Environment-variable access.
pkgs/npm/@[email protected]__sourcemap/src/tracingHelper.ts:237 
  const value = process.env[key] ?? process.env[key.toLowerCase()];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@cfworker/json-schema

npm dependency
expand_more 1 low-confidence finding(s)
low egress dependency Excluded from app score #517452adfaa0cd43 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/dereference.ts:75 
    : new URL('https://github.com/cfworker');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@composio/core

npm dependency
expand_more 15 low-confidence finding(s)
low env_fs dependency Excluded from app score #364fc14f0a1cba94 — Filesystem access.
pkgs/npm/@[email protected]/src/models/RemoteFile.ts:169 
    platform.writeFileSync(savePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60ec5bb573393b8f — Filesystem access.
pkgs/npm/@[email protected]/src/models/ToolRouterSessionFileMount.ts:135 
      const content = platform.readFileSync(input);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #133f0272efd83506 — Filesystem access.
pkgs/npm/@[email protected]/src/platform/node.ts:47 
      const buf = fs.readFileSync(filePath, { encoding: null });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e39a7e3768079621 — Filesystem access.
pkgs/npm/@[email protected]/src/platform/node.ts:52 
    const str = fs.readFileSync(filePath, { encoding });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d6acc456a0a0243 — Filesystem access.
pkgs/npm/@[email protected]/src/platform/node.ts:62 
      fs.writeFileSync(filePath, content, { encoding });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #738f5c7a6533a448 — Filesystem access.
pkgs/npm/@[email protected]/src/platform/node.ts:64 
      fs.writeFileSync(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #deed7761dd65350b — Environment-variable access.
pkgs/npm/@[email protected]/src/services/pusher/Pusher.ts:28 
    this.apiKey = client.apiKey ?? process.env.COMPOSIO_API_KEY ?? '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #05f45079db8b0f58 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/services/telemetry/TelemetryService.ts:14 
      const result = await fetch(`${TELEMETRY_URL}/metrics/invocations`, {
        method: 'POST',
        headers: {
          'Content-Type': 'application/json',
        },
        body: JSON.stringify(payload),
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2ff35572be41c377 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/services/telemetry/TelemetryService.ts:35 
      const result = await fetch(`${TELEMETRY_URL}/errors`, {
        method: 'POST',
        headers: {
          'Content-Type': 'application/json',
        },
        body: JSON.stringify(payload),
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #fb3e094e629cb3f4 — Environment-variable access.
pkgs/npm/@[email protected]/src/utils/env.ts:6 
    return process.env[name] || defaultValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3fe0b38a53c7164f — Filesystem access.
pkgs/npm/@[email protected]/src/utils/fileUtils.node.ts:135 
    const content = platform.readFileSync(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aafa47038eda2581 — Filesystem access.
pkgs/npm/@[email protected]/src/utils/fileUtils.node.ts:448 
      platform.writeFileSync(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #38392bc51f323474 — Filesystem access.
pkgs/npm/@[email protected]/src/utils/fileUtils.node.ts:450 
      platform.writeFileSync(filePath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18ffae8a1ac8490d — Filesystem access.
pkgs/npm/@[email protected]/src/utils/sdk.ts:34 
    const data = platform.readFileSync(dataPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #f8af985a5c14d1a3 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/utils/version.ts:46 
    const response = await fetch(`https://registry.npmjs.org/${packageName}/latest`);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

Skipped dependencies

Production

  • @atlaskit/pragmatic-drag-and-drop prod — dist-only: no readable source
  • @better-auth/expo prod — dist-only: no readable source
  • @better-auth/passkey prod — dist-only: no readable source
  • @chat-adapter/discord prod — dist-only: no readable source
  • @chat-adapter/slack prod — dist-only: no readable source
  • @chat-adapter/state-ioredis prod — dist-only: no readable source
  • @chat-adapter/telegram prod — dist-only: no readable source
  • @discordjs/rest prod — scan budget exceeded
  • @dnd-kit/core prod — scan budget exceeded
  • @dnd-kit/sortable prod — scan budget exceeded
  • @dnd-kit/utilities prod — scan budget exceeded
  • @emoji-mart/data prod — scan budget exceeded
  • @emoji-mart/react prod — scan budget exceeded
  • @emotion/react prod — scan budget exceeded
  • @fal-ai/client prod — scan budget exceeded
  • @floating-ui/react prod — scan budget exceeded
  • @formkit/auto-animate prod — scan budget exceeded
  • @google/genai prod — scan budget exceeded
  • @henrygd/queue prod — scan budget exceeded
  • @huggingface/inference prod — scan budget exceeded
  • @icons-pack/react-simple-icons prod — scan budget exceeded
  • @khmyznikov/pwa-install prod — scan budget exceeded
  • @larksuiteoapi/node-sdk prod — scan budget exceeded
  • @lexical/utils prod — scan budget exceeded
  • @lobechat/agent-gateway-client prod — scan budget exceeded
  • @lobechat/agent-mock prod — scan budget exceeded
  • @lobechat/agent-runtime prod — scan budget exceeded
  • @lobechat/agent-signal prod — scan budget exceeded
  • @lobechat/agent-templates prod — scan budget exceeded
  • @lobechat/artifact-template prod — scan budget exceeded
  • @lobechat/builtin-agents prod — scan budget exceeded
  • @lobechat/builtin-skills prod — scan budget exceeded
  • @lobechat/builtin-tool-activator prod — scan budget exceeded
  • @lobechat/builtin-tool-agent-builder prod — scan budget exceeded
  • @lobechat/builtin-tool-agent-documents prod — scan budget exceeded
  • @lobechat/builtin-tool-agent-management prod — scan budget exceeded
  • @lobechat/builtin-tool-agent-signal prod — scan budget exceeded
  • @lobechat/builtin-tool-brief prod — scan budget exceeded
  • @lobechat/builtin-tool-browser prod — scan budget exceeded
  • @lobechat/builtin-tool-calculator prod — scan budget exceeded
  • @lobechat/builtin-tool-claude-code prod — scan budget exceeded
  • @lobechat/builtin-tool-cloud-sandbox prod — scan budget exceeded
  • @lobechat/builtin-tool-creds prod — scan budget exceeded
  • @lobechat/builtin-tool-group-agent-builder prod — scan budget exceeded
  • @lobechat/builtin-tool-group-management prod — scan budget exceeded
  • @lobechat/builtin-tool-knowledge-base prod — scan budget exceeded
  • @lobechat/builtin-tool-lobe-agent prod — scan budget exceeded
  • @lobechat/builtin-tool-lobe-delivery-checker prod — scan budget exceeded
  • @lobechat/builtin-tool-local-system prod — scan budget exceeded
  • @lobechat/builtin-tool-memory prod — scan budget exceeded
  • @lobechat/builtin-tool-message prod — scan budget exceeded
  • @lobechat/builtin-tool-notebook prod — scan budget exceeded
  • @lobechat/builtin-tool-page-agent prod — scan budget exceeded
  • @lobechat/builtin-tool-remote-device prod — scan budget exceeded
  • @lobechat/builtin-tool-self-iteration prod — scan budget exceeded
  • @lobechat/builtin-tool-skill-maintainer prod — scan budget exceeded
  • @lobechat/builtin-tool-skill-store prod — scan budget exceeded
  • @lobechat/builtin-tool-skills prod — scan budget exceeded
  • @lobechat/builtin-tool-task prod — scan budget exceeded
  • @lobechat/builtin-tool-topic-reference prod — scan budget exceeded
  • @lobechat/builtin-tool-user-interaction prod — scan budget exceeded
  • @lobechat/builtin-tool-verify prod — scan budget exceeded
  • @lobechat/builtin-tool-web-browsing prod — scan budget exceeded
  • @lobechat/builtin-tool-web-onboarding prod — scan budget exceeded
  • @lobechat/builtin-tools prod — scan budget exceeded
  • @lobechat/business-config prod — scan budget exceeded
  • @lobechat/business-const prod — scan budget exceeded
  • @lobechat/business-model-bank prod — scan budget exceeded
  • @lobechat/business-model-runtime prod — scan budget exceeded
  • @lobechat/chat-adapter-feishu prod — scan budget exceeded
  • @lobechat/chat-adapter-imessage prod — scan budget exceeded
  • @lobechat/chat-adapter-line prod — scan budget exceeded
  • @lobechat/chat-adapter-qq prod — scan budget exceeded
  • @lobechat/chat-adapter-wechat prod — scan budget exceeded
  • @lobechat/config prod — scan budget exceeded
  • @lobechat/const prod — scan budget exceeded
  • @lobechat/context-engine prod — scan budget exceeded
  • @lobechat/conversation-flow prod — scan budget exceeded
  • @lobechat/database prod — scan budget exceeded
  • @lobechat/desktop-bridge prod — scan budget exceeded
  • @lobechat/device-gateway-client prod — scan budget exceeded
  • @lobechat/edge-config prod — scan budget exceeded
  • @lobechat/editor-runtime prod — scan budget exceeded
  • @lobechat/electron-client-ipc prod — scan budget exceeded
  • @lobechat/electron-server-ipc prod — scan budget exceeded
  • @lobechat/eval-dataset-parser prod — scan budget exceeded
  • @lobechat/eval-rubric prod — scan budget exceeded
  • @lobechat/fetch-sse prod — scan budget exceeded
  • @lobechat/file-loaders prod — scan budget exceeded
  • @lobechat/heterogeneous-agents prod — scan budget exceeded
  • @lobechat/llm-generation-tracing prod — scan budget exceeded
  • @lobechat/local-file-shell prod — scan budget exceeded
  • @lobechat/markdown-patch prod — scan budget exceeded
  • @lobechat/memory-user-memory prod — scan budget exceeded
  • @lobechat/model-runtime prod — scan budget exceeded
  • @lobechat/observability-otel prod — scan budget exceeded
  • @lobechat/openapi prod — scan budget exceeded
  • @lobechat/prompts prod — scan budget exceeded
  • @lobechat/python-interpreter prod — scan budget exceeded
  • @lobechat/shared-tool-ui prod — scan budget exceeded
  • @lobechat/ssrf-safe-fetch prod — scan budget exceeded
  • @lobechat/tool-runtime prod — scan budget exceeded
  • @lobechat/utils prod — scan budget exceeded
  • @lobechat/web-crawler prod — scan budget exceeded
  • @lobehub/analytics prod — scan budget exceeded
  • @lobehub/charts prod — scan budget exceeded
  • @lobehub/desktop-ipc-typings prod — scan budget exceeded
  • @lobehub/editor prod — scan budget exceeded
  • @lobehub/icons prod — scan budget exceeded
  • @lobehub/market-sdk prod — scan budget exceeded
  • @lobehub/tts prod — scan budget exceeded
  • @lobehub/ui prod — scan budget exceeded
  • @modelcontextprotocol/sdk prod — scan budget exceeded
  • @napi-rs/canvas prod — scan budget exceeded
  • @neondatabase/serverless prod — scan budget exceeded
  • @next/third-parties prod — scan budget exceeded
  • @opentelemetry/auto-instrumentations-node prod — scan budget exceeded
  • @opentelemetry/exporter-jaeger prod — scan budget exceeded
  • @opentelemetry/resources prod — scan budget exceeded
  • @opentelemetry/sdk-metrics prod — scan budget exceeded
  • @opentelemetry/winston-transport prod — scan budget exceeded
  • @pierre/trees prod — scan budget exceeded
  • @react-pdf/renderer prod — scan budget exceeded
  • @react-three/drei prod — scan budget exceeded
  • @react-three/fiber prod — scan budget exceeded
  • @saintno/comfyui-sdk prod — scan budget exceeded
  • @t3-oss/env-core prod — scan budget exceeded
  • @t3-oss/env-nextjs prod — scan budget exceeded
  • @tanstack/react-query prod — scan budget exceeded
  • @trpc/client prod — scan budget exceeded
  • @trpc/next prod — scan budget exceeded
  • @trpc/react-query prod — scan budget exceeded
  • @trpc/server prod — scan budget exceeded
  • @upstash/qstash prod — scan budget exceeded
  • @upstash/workflow prod — scan budget exceeded
  • @vercel/analytics prod — scan budget exceeded
  • @vercel/edge-config prod — scan budget exceeded
  • @vercel/functions prod — scan budget exceeded
  • @vercel/speed-insights prod — scan budget exceeded
  • @virtuoso.dev/masonry prod — scan budget exceeded
  • @xterm/addon-fit prod — scan budget exceeded
  • @xterm/xterm prod — scan budget exceeded
  • @zumer/snapdom prod — scan budget exceeded
  • ahooks prod — scan budget exceeded
  • antd prod — scan budget exceeded
  • antd-style prod — scan budget exceeded
  • async-retry prod — scan budget exceeded
  • bcryptjs prod — scan budget exceeded
  • better-auth prod — scan budget exceeded
  • brotli-wasm prod — scan budget exceeded
  • buffer.js prod — scan budget exceeded
  • chat prod — scan budget exceeded
  • chroma-js prod — scan budget exceeded
  • class-variance-authority prod — scan budget exceeded
  • cmdk prod — scan budget exceeded
  • cookie prod — scan budget exceeded
  • countries-and-timezones prod — scan budget exceeded
  • d3-dsv prod — scan budget exceeded
  • dayjs prod — scan budget exceeded
  • debug prod — scan budget exceeded
  • dexie prod — scan budget exceeded
  • diff prod — scan budget exceeded
  • discord-api-types prod — scan budget exceeded
  • drizzle-orm prod — scan budget exceeded
  • drizzle-zod prod — scan budget exceeded
  • epub2 prod — scan budget exceeded
  • es-toolkit prod — scan budget exceeded
  • expo-server-sdk prod — scan budget exceeded
  • fast-deep-equal prod — scan budget exceeded
  • fflate prod — scan budget exceeded
  • ffmpeg-static prod — scan budget exceeded
  • file-type prod — scan budget exceeded
  • fuse.js prod — scan budget exceeded
  • gray-matter prod — scan budget exceeded
  • hono prod — scan budget exceeded
  • html-to-text prod — scan budget exceeded
  • i18next prod — scan budget exceeded
  • i18next-browser-languagedetector prod — scan budget exceeded
  • i18next-resources-to-backend prod — scan budget exceeded
  • immer prod — scan budget exceeded
  • ioredis prod — scan budget exceeded
  • jose prod — scan budget exceeded
  • js-sha256 prod — scan budget exceeded
  • jsondiffpatch prod — scan budget exceeded
  • jsonl-parse-stringify prod — scan budget exceeded
  • langfuse prod — scan budget exceeded
  • langfuse-core prod — scan budget exceeded
  • lexical prod — scan budget exceeded