Close Open Privacy Scan

bolt Snapshot: commit 0389495

science engine v1.21

schedule 2026-07-18T15:11:02.238142+00:00

smart_toy MCP server detected: @modelcontextprotocol/ext-apps, @modelcontextprotocol/sdk, github.com/anthropics/anthropic-sdk-go, github.com/modelcontextprotocol/go-sdk +1 more — detected in dependencies, not a safety judgment.

App Privacy Score

72 /100

Medium privacy risk

Medium risk · 141 finding(s)

Dependency score: 72 (Medium risk)

bar_chart Score Breakdown

telemetry −25

env_fs −3

list Scan Summary

0 high 0 medium 141 low

First-party packages: 1

Dependency packages: 4

Ecosystem: rust

swap_horiz External domains

access.line.meaccount.health.nokia.comaccount.withings.comaccounts.google.comaccounts.spotify.comacme-staging-v02.api.letsencrypt.orgacme-v02.api.letsencrypt.orgagenthub.localai.ioaiplatform.eu.rep.googleapis.comaiplatform.googleapis.comaiplatform.us.rep.googleapis.comamazonaws.comapi.amazon.comapi.anthropic.comapi.badgr.ioapi.dropboxapi.comapi.ebay.comapi.fitbit.comapi.github.comapi.hipchat.comapi.instagram.comapi.line.meapi.login.yahoo.comapi.mediamath.comapi.odnoklassniki.ruapi.openai.comapi.paypal.comapi.pinterest.comapi.sandbox.paypal.comapi.telegram.orgapi.twitter.comapi.x.comapp.asana.comapp.rakuten.co.jpappleid.apple.comapps.extensions.modelcontextprotocol.ioassets.anthropic.comaudio-samples.github.ioauth.ebay.combadgr.combattle.netbitbucket.orgcdn.jsdelivr.netcdn.openai.comcdnjs.cloudflare.comcloud.google.comcognitiveservices.azure.comconformance-test.localdeveloper.android.comdeveloper.fyne.iodiscord.comdiscord.ggdl.google.comdocs.docker.comdocs.fyne.iodumps.wikimedia.orgecho.labstack.comen.wiktionary.orgencoding.spec.whatwg.orgevilmartians.comfonts.googleapis.comfoursquare.comfyne.ioghcr.iogithub.comgitlab.comgolang.orggorm.iograph.facebook.comgraph.qq.comgrpc.iohg.mozilla.orghooks.slack.comhost.docker.internalhub.docker.comhuggingface.coid.heroku.comid.twitch.tvindex.docker.iojson-schema.orgjson.orgkauth.kakao.comlearn.microsoft.comlocalai.iologin.coinbase.comlogin.live.comlogin.mailchimp.comlogin.microsoftonline.comlogin.uber.commodelscope.cnmudler.pmmusicbrainz.orgnid.naver.como2.mail.ruoauth.pipedrive.comoauth.vk.comoauth.web.cern.choauth.yandex.comoauth2.googleapis.comoauth2.mtls.googleapis.comonsi.github.ioopencontainers.orgopentelemetry.ioplatform.claude.comprotobuf.devqianwen-res.oss-cn-beijing.aliyuncs.comraw.githubusercontent.comreact.devreact.i18next.comreactjs.orgregistry.ollama.ais3-external-1.amazonaws.coms3-fips.ca-central-1.amazonaws.coms3-fips.ca-west-1.amazonaws.coms3-fips.dualstacks3-fips.dualstack.ca-central-1.amazonaws.coms3-fips.dualstack.ca-west-1.amazonaws.coms3-fips.dualstack.us-east-1s3-fips.dualstack.us-east-1.amazonaws.coms3-fips.dualstack.us-east-2.amazonaws.coms3-fips.dualstack.us-iso-east-1.c2s.ic.govs3-fips.dualstack.us-iso-west-1.c2s.ic.govs3-fips.dualstack.us-isob-east-1.sc2s.sgov.govs3-fips.dualstack.us-west-1.amazonaws.coms3-fips.dualstack.us-west-2.amazonaws.coms3-fips.us-east-1s3-fips.us-east-1.amazonaws.coms3-fips.us-east-2.amazonaws.coms3-fips.us-gov-east-1.amazonaws.coms3-fips.us-gov-west-1.amazonaws.coms3-fips.us-iso-east-1.c2s.ic.govs3-fips.us-iso-west-1.c2s.ic.govs3-fips.us-isob-east-1.sc2s.sgov.govs3-fips.us-west-1.amazonaws.coms3-fips.us-west-2.amazonaws.coms3.amazonaws.coms3.ap-northeast-1.amazonaws.coms3.ap-southeast-1.amazonaws.coms3.ap-southeast-2.amazonaws.coms3.dualstacks3.dualstack.af-south-1.amazonaws.coms3.dualstack.ap-east-1.amazonaws.coms3.dualstack.ap-northeast-1.amazonaws.coms3.dualstack.ap-northeast-2.amazonaws.coms3.dualstack.ap-northeast-3.amazonaws.coms3.dualstack.ap-south-1.amazonaws.coms3.dualstack.ap-south-2.amazonaws.coms3.dualstack.ap-southeast-1.amazonaws.coms3.dualstack.ap-southeast-2.amazonaws.coms3.dualstack.ap-southeast-3.amazonaws.coms3.dualstack.ap-southeast-4.amazonaws.coms3.dualstack.ap-southeast-5.amazonaws.coms3.dualstack.ap-southeast-7.amazonaws.coms3.dualstack.ca-central-1.amazonaws.coms3.dualstack.ca-west-1.amazonaws.coms3.dualstack.cn-north-1.amazonaws.com.cns3.dualstack.cn-northwest-1.amazonaws.com.cns3.dualstack.eu-central-1.amazonaws.coms3.dualstack.eu-central-2.amazonaws.coms3.dualstack.eu-north-1.amazonaws.coms3.dualstack.eu-south-1.amazonaws.coms3.dualstack.eu-south-2.amazonaws.coms3.dualstack.eu-west-1.amazonaws.coms3.dualstack.eu-west-2.amazonaws.coms3.dualstack.eu-west-3.amazonaws.coms3.dualstack.il-central-1.amazonaws.coms3.dualstack.me-central-1.amazonaws.coms3.dualstack.me-south-1.amazonaws.coms3.dualstack.mx-central-1.amazonaws.coms3.dualstack.sa-east-1.amazonaws.coms3.dualstack.us-east-1s3.dualstack.us-east-1.amazonaws.coms3.dualstack.us-east-2.amazonaws.coms3.dualstack.us-gov-east-1.amazonaws.coms3.dualstack.us-gov-west-1.amazonaws.coms3.dualstack.us-west-1.amazonaws.coms3.dualstack.us-west-2.amazonaws.coms3.eu-west-1.amazonaws.coms3.sa-east-1.amazonaws.coms3.us-east-1.amazonaws.coms3.us-gov-east-1.amazonaws.coms3.us-gov-west-1.amazonaws.coms3.us-west-1.amazonaws.coms3.us-west-2.amazonaws.coms3express-control-fips.dualstacks3express-control.dualstackschemas.android.comschemas.microsoft.comslack.comstackoverflow.comsts.universe_domaint1sandbox.mediamath.comtailwindcss.comtuf-repo-cdn.sigstage.devtuf-repo-cdn.sigstore.devtwitter.comunicode.orgvirtual.fulcio.sigstore.devvirtual.tsa.sigstore.devwikipedia.orgwww.amazon.comwww.cis.upenn.eduwww.dropbox.comwww.facebook.comwww.fitbit.comwww.googleapis.comwww.hipchat.comwww.iana.orgwww.linkedin.comwww.nltk.orgwww.odnoklassniki.ruwww.openstreetmap.orgwww.patreon.comwww.paypal.comwww.pinterest.comwww.sandbox.paypal.comwww.splitwise.comwww.strava.comwww.unicode.orgwww.w3.orgwww2.census.govx.comzoom.us

</> First-Party Code

first-party (rust): backend/rust/kokoros

rust first-party

expand_more 17 low-confidence finding(s)

low env_fs production #8bc140c3df30ac0b — Environment-variable access.

repo/backend/rust/kokoros/build.rs:2

    let proto_path = std::env::var("BACKEND_PROTO_PATH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b33f3f2e4704c17e — Environment-variable access.

repo/backend/rust/kokoros/src/auth.rs:6

    let token = std::env::var("LOCALAI_GRPC_AUTH_TOKEN").ok()?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low telemetry production #84434fd165738383 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

repo/backend/rust/kokoros/src/main.rs:34

    tracing::info!("Starting kokoros gRPC server on {}", addr);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry production #643b29e0d1a3d739 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

repo/backend/rust/kokoros/src/main.rs:39

        tracing::info!("Bearer token authentication enabled");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low env_fs production #03383594645cf2ef — Filesystem access.

repo/backend/rust/kokoros/src/service.rs:25

    let mut f = File::create(path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low telemetry production #11ca35fafa102725 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

repo/backend/rust/kokoros/src/service.rs:124

        tracing::info!("Loading Kokoros model from: {}", model_path);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry production #cb71a257468be5c5 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

repo/backend/rust/kokoros/src/service.rs:125

        tracing::info!("Loading voices from: {}", voices_path);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry production #d1e58e455da2f9b8 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

repo/backend/rust/kokoros/src/service.rs:126

        tracing::info!("Language: {}", self.language.lock().unwrap());

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry production #5b6c4434a01d0ab7 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

repo/backend/rust/kokoros/src/service.rs:131

        tracing::info!("Kokoros TTS model loaded successfully");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry production #7c6e8a044fa54f1d — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

repo/backend/rust/kokoros/src/service.rs:159

        tracing::info!(
            text = req.text,
            voice = voice,
            lang = lang.as_str(),
            dst = req.dst,
            "TTS request received"
        );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry production #1292c0627cf4bf5f — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

repo/backend/rust/kokoros/src/service.rs:171

                tracing::info!(
                    num_samples = samples.len(),
                    audio_duration = format!("{:.2}s", duration_secs),
                    inference_time = format!("{:.2}s", start.elapsed().as_secs_f64()),
                    dst = req.dst,
                    "TTS inference complete"
                );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry production #469d284b29cabdba — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

repo/backend/rust/kokoros/src/service.rs:179

                    tracing::error!("Failed to write WAV to {}: {}", req.dst, e);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry production #55877c8d63dbc0cd — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

repo/backend/rust/kokoros/src/service.rs:191

                tracing::error!("TTS error: {}", e);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry production #a00fb3170a8e76e8 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

repo/backend/rust/kokoros/src/service.rs:264

                tracing::error!("TTSStream error: {}", e);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low env_fs production #579bc80ca29cceba — Filesystem access.

repo/backend/rust/kokoros/src/service.rs:634

        let data = std::fs::read(&path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9c413261817eb41c — Environment-variable access.

repo/backend/rust/kokoros/src/service.rs:673

        let model_dir = match std::env::var("KOKOROS_MODEL_PATH") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6c93ee2ebd7711e8 — Filesystem access.

repo/backend/rust/kokoros/src/service.rs:701

        let data = std::fs::read(&out_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

tokio

rust dependency

expand_more 4 low-confidence finding(s)

low env_fs dependency Excluded from app score #6ea704b50146c685 — Filesystem access.

pkgs/rust/[email protected]/src/fs/read.rs:79

    asyncify(move || std::fs::read(path)).await

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e85fa91cb53a8a2f — Filesystem access.

pkgs/rust/[email protected]/src/fs/read_to_string.rs:29

    asyncify(move || std::fs::read_to_string(path)).await

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d83b808b61dc0526 — Filesystem access.

pkgs/rust/[email protected]/src/fs/write.rs:98

    asyncify(move || std::fs::write(path, contents)).await

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ec18d1d08704f22 — Environment-variable access.

pkgs/rust/[email protected]/src/loom/std/mod.rs:90

        match std::env::var(ENV_WORKER_THREADS) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

tonic

rust dependency

expand_more 6 low-confidence finding(s)

low telemetry dependency Excluded from app score #56a1863867849f68 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/transport/channel/service/connection.rs:202

                        tracing::debug!("connection task error: {:?}", e);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #904acd296e426f7b — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/transport/channel/service/reconnect.rs:104

                                tracing::debug!("reconnect::poll_ready: {:?}", error);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #1d13bbda99c328c9 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/transport/channel/service/reconnect.rs:143

            tracing::debug!("error: {}", error);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #65ebdee6b2f38bc7 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/transport/channel/service/tls.rs:66

                tracing::debug!("errors occurred when loading native certs: {errors:?}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #f15bec2eac1b337c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/transport/server/io_stream.rs:114

                tracing::debug!(error = %e, "tls accept error");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #1a1eb3931ba2825b — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/transport/server/io_stream.rs:126

    tracing::debug!(error = %e, "accept loop error");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

tracing

rust dependency

expand_more 1 low-confidence finding(s)

low telemetry dependency Excluded from app score #ca51aadef15902e9 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/event.rs:7

        b.iter(|| tracing::info!("hello world!"))

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

tracing-subscriber

rust dependency

expand_more 113 low-confidence finding(s)

low telemetry dependency Excluded from app score #ff9346b091928d05 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:50

                tracing::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #b4947b3bdd6adc62 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:51

                tracing::debug!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #4df726856bb5183a — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:52

                tracing::warn!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #c0972f4de9a3ccd6 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:63

                tracing::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #f42d609f23df4019 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:64

                tracing::debug!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #c5e32e9bf24935ea — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:65

                tracing::warn!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #835343da441c2ea4 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:76

                tracing::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #646ff314998902cb — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:86

                tracing::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #c86b7183f3e6ee41 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:96

                tracing::debug!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #d61208fb46683d31 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:114

                tracing::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #8a3b1a349f14d6f0 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:124

                tracing::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #fda15ced98aee418 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:136

                        tracing::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #ea3cb3c093330403 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:139

                        tracing::debug!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #c271344a92656061 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:142

                        tracing::warn!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #949c20fbfebec252 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:145

                        tracing::warn!(target: "foo", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #94cb2836be9e41c5 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:164

                        tracing::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #d016b86ce1ac076d — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:167

                        tracing::debug!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #22ac922455eb4762 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:170

                        tracing::warn!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #2712339e0b0eef41 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:173

                        tracing::warn!(target: "foo", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #896a829da9c2cf46 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:191

                    tracing::info!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #80ca2410a0c3d217 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:192

                    tracing::debug!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #25b367767d7e4c53 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:195

                    tracing::warn!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #ae5b7fd2bfe8c523 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:206

                    tracing::info!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #05c453ba40bfb416 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:207

                    tracing::debug!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #021c6872a13a06fb — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:210

                    tracing::warn!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #89473e32d5097666 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:226

                        tracing::info!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #091355f3db34d71f — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:231

                        tracing::debug!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #21e561ed4bd8309c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:236

                        tracing::debug!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #7159680d66b3c330 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:258

                        tracing::info!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #60f63c5767ea7bd5 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:263

                        tracing::debug!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #1e8422b81bab76f9 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:268

                        tracing::debug!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #d84d6473252b4a9a — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter.rs:291

                tracing::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #182b056bce0cb6f8 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:52

                log::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #9aa4abbf9d08718f — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:53

                log::debug!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #57857d624a68e372 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:54

                log::warn!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #d79422db7bb6e143 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:65

                log::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #23162c9e8e705c86 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:66

                log::debug!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #97f1fe3e8c6bf294 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:67

                log::warn!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #0579062c605dda5e — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:78

                log::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #0cd2608a47ef973c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:88

                log::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #e964bddc09985c44 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:98

                log::debug!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #e921e6c9b83987ef — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:116

                log::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #470422186e6fd344 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:126

                log::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #5e23305f454c93bb — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:138

                        log::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #a5e81be793972c71 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:141

                        log::debug!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #2b4844f44533dc4b — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:144

                        log::warn!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #7eb992d8c78ff02c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:147

                        log::warn!(target: "foo", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #eceb488a8437c1bb — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:166

                        log::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #f432db0f5455e3c7 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:169

                        log::debug!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #95545c7fb1d91c95 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:172

                        log::warn!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #2ffcefaa17469bf6 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:175

                        log::warn!(target: "foo", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #d18df1f556f179a9 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:195

                    log::info!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #f37c50b670efd43c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:196

                    log::debug!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #06f2853b51ea325a — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:199

                    log::warn!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #6d676c155564d482 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:210

                    log::info!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #f91f47ce80a74dc5 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:211

                    log::debug!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #9fa9d31ccabcd145 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:214

                    log::warn!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #0c1819bff48ec926 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:230

                        log::info!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #f9ed0aaa6127cb52 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:235

                        log::debug!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #10e9ac4a70670f3a — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:240

                        log::debug!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #a37d56377589d5d4 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:262

                        log::info!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #0a716bd963955020 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:267

                        log::debug!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #9d4f1896b7bf2ce2 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:272

                        log::debug!("hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #defa48c092d44e64 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/filter_log.rs:298

                log::info!(target: "static_filter", "hi");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #7ee0a8f1f47926a8 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/fmt.rs:103

                        tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #d3be52472c81100f — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/fmt.rs:117

                                tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #633c529a7eec598b — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/fmt.rs:122

                                tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #2d9dbea480226869 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/fmt.rs:127

                                tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #7f4d123f52c24709 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/fmt.rs:132

                                tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #57f888551ac262b1 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/fmt.rs:150

                            tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #c860af881fbfe4bb — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/fmt.rs:171

                                    tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #8c9253a61b6aa2be — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/fmt.rs:179

                                    tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #cb14ad950c965073 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/fmt.rs:187

                                    tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #0a9defa1b748dbc2 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/fmt.rs:195

                                    tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #42c499e1ede2859c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/fmt.rs:222

                                tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #6e0f47cf8677675e — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/fmt.rs:230

                                tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #6f724618f7f56aad — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/fmt.rs:238

                                tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #7fdd77d515e5a1e7 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/fmt.rs:246

                                tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #2a38a5a703f3c560 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/fmt.rs:276

                                    tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #fc8fa3860586b479 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/fmt.rs:289

                                    tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #238ebca9c8e5c7da — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/fmt.rs:302

                                    tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #d4c8dcc59d7d016e — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/benches/fmt.rs:315

                                    tracing::info!(n);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low env_fs dependency Excluded from app score #55271b6659064880 — Environment-variable access.

pkgs/rust/[email protected]/src/filter/env/builder.rs:189

        let var = env::var(self.env_var_name()).unwrap_or_default();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #682e4bbc2c5a3b61 — Environment-variable access.

pkgs/rust/[email protected]/src/filter/env/builder.rs:203

        let var = env::var(self.env_var_name()).unwrap_or_default();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dbe52aadff557de0 — Environment-variable access.

pkgs/rust/[email protected]/src/filter/env/builder.rs:216

        let var = env::var(self.env_var_name())?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #173ed4d3e62a2b93 — Environment-variable access.

pkgs/rust/[email protected]/src/fmt/fmt_layer.rs:743

        let ansi = cfg!(feature = "ansi") && env::var("NO_COLOR").map_or(true, |v| v.is_empty());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low telemetry dependency Excluded from app score #de61ae227a39723c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/fmt/fmt_layer.rs:1382

            tracing::info!(?AlwaysError);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #0981fa6de407d8de — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/fmt/fmt_layer.rs:1420

            tracing::info!(?AlwaysError);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #e586fc5c525c1017 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/fmt/fmt_layer.rs:1580

            tracing::info!(target: "writer2", "hello writer2!");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #5c73dd021c079d6c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/fmt/fmt_layer.rs:1583

            tracing::warn!(target: "writer1", "hello writer1!");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low env_fs dependency Excluded from app score #358087586a423038 — Environment-variable access.

pkgs/rust/[email protected]/src/fmt/fmt_layer.rs:1623

        let _saved_no_color = RestoreEnvVar(env::var(NO_COLOR));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low telemetry dependency Excluded from app score #931983d22ce74351 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/fmt/format/json.rs:588

            tracing::info!("some json test");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #53090e55d4e4affa — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/fmt/format/json.rs:616

            tracing::info!("some json test");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #ed02071b6c1d75a9 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/fmt/format/json.rs:632

            tracing::info!("some json test");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #b87873aa5fbf8a50 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/fmt/format/json.rs:648

            tracing::info!("some json test");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #24ef63721ce52e2e — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/fmt/format/json.rs:663

            tracing::info!("some json test");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #f4e007d13d948bda — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/fmt/format/json.rs:678

            tracing::info!("some json test");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #e53e2694d9896507 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/fmt/format/json.rs:700

            tracing::info!("some json test");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #44e250a0c3aacce7 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/fmt/format/json.rs:713

            tracing::info!("some json test");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #ab6a50101ece04f2 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/fmt/format/json.rs:729

            tracing::info!("an event outside the root span");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #92745e6991f73aff — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/fmt/format/json.rs:739

            tracing::info!("an event inside the root span");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #a5175cdc377b4f4f — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/fmt/format/mod.rs:1901

        tracing::info!("hello");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #1437ff768bfd0f77 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/fmt/format/mod.rs:1920

        tracing::info!("hello");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #af62c075eb067d0c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/fmt/format/mod.rs:1976

        tracing::info!("hello");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #9377695c8e77b020 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/fmt/format/mod.rs:1990

        tracing::info!("hello");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #f784b89f0a47f852 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/fmt/format/mod.rs:2017

            tracing::info!(parent: &span2, "hello");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #8a3e1e4826ed4b97 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/fmt/format/mod.rs:2044

            tracing::info!("hello");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #7401809de30612b2 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/fmt/format/mod.rs:2047

            tracing::info!(parent: &span2, "hello");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #a629701bd94af5fe — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/fmt/format/mod.rs:2054

        tracing::info!("hello");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low env_fs dependency Excluded from app score #cb280bb711727b67 — Environment-variable access.

pkgs/rust/[email protected]/src/fmt/mod.rs:1219

        let targets = match env::var("RUST_LOG") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low telemetry dependency Excluded from app score #20fff3fd86c40e98 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/layer/tests.rs:145

                tracing::info!("no span");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #c2fe23b2390f853d — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/layer/tests.rs:149

                tracing::info!(parent: &parent, "explicit span");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

low telemetry dependency Excluded from app score #642db4656efb04fe — Log/trace emission. Structured logs can carry PII to sinks/aggregators.

pkgs/rust/[email protected]/src/layer/tests.rs:153

                tracing::info!("contextual span");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

Skipped dependencies

Production

@codemirror/autocomplete prod — dist-only: no readable source
@codemirror/commands prod — dist-only: no readable source
@codemirror/language prod — dist-only: no readable source
@codemirror/lint prod — dist-only: no readable source
@codemirror/search prod — dist-only: no readable source
@codemirror/state prod — dist-only: no readable source
@codemirror/view prod — dist-only: no readable source
@fontsource-variable/geist prod — no javascript source
@fontsource-variable/geist-mono prod — no javascript source
github.com/ollama/ollama prod — module zip exceeds byte cap
github.com/klauspost/compress prod — module zip exceeds byte cap
kokoros prod — cdn 403

verified_user No application data leak found

App Privacy Score

bar_chart Score Breakdown

list Scan Summary

swap_horiz External domains

</> First-Party Code

first-party (rust): backend/rust/kokoros

</> Dependencies

tokio

tonic

tracing

tracing-subscriber

Skipped dependencies