Close Open Privacy Scan

link https://github.com/RooCodeInc/Roo-Code

bolt Snapshot: commit b867ec9

science engine v1.22

schedule 2026-07-23T12:21:50.399458+00:00

smart_toy MCP server detected: @anthropic-ai/sdk, @mistralai/mistralai, @modelcontextprotocol/sdk, @qdrant/js-client-rest +1 more — detected in dependencies, not a safety judgment.

App Privacy Score

82 /100

Low privacy risk

Low risk · 2425 finding(s)

Dependency score: 22 (High risk)

bar_chart Score Breakdown

egress −15

env_fs −3

list Scan Summary

0 high 150 medium 2275 low

First-party packages: 10

Dependency packages: 34

Ecosystem: npm

swap_horiz Application data flows

External domains: ai-gateway.vercel.shai.google.devaiplatform.eu.rep.googleapis.comaiplatform.googleapis.comaiplatform.us.rep.googleapis.comapi.anthropic.comapi.deepseek.comapi.eu.mistral.aiapi.fireworks.aiapi.getunbound.aiapi.github.comapi.minimax.ioapi.minimaxi.comapi.mistral.aiapi.moonshot.aiapi.moonshot.cnapi.openai.comapi.poe.comapi.sambanova.aiapi.us.mistral.aiapi.x.aiapi.z.aiapp.baseten.coapp.requesty.aiauth.openai.comautopush-generativelanguage.sandbox.googleapis.comaws.amazon.combaseten.cobedrock-agent-runtime.us-west-2.amazonaws.combedrock-mantle.us-east-1.api.awsbedrock-runtime.us-east-1.amazonaws.combitcoin.orgbsky.appchat.qwen.aichatgpt.comcline.botcloud.google.comcloud.sambanova.aicode.visualstudio.comcodestral.mistral.aiconsole.anthropic.comconsole.cloud.google.comconsole.mistral.aidashscope.aliyuncs.comdashscope.console.aliyun.comdevelopers.google.comdocs.anthropic.comdocs.cloud.google.comdocs.expo.devdocs.litellm.aidocs.mistral.aidummy.comemscripten.orgfireworks.aigateway.getunbound.aigateway.my-company.comgemini-api-demos.uc.r.appspot.comgenerativelanguage.googleapis.comgit-scm.comgithub.comgoo.glgoogle.aip.devhelp.openai.comimg.clerk.cominference.baseten.cojson-schema.orglmstudio.aimanagement.azure.commarketplace.visualstudio.commetadata.google.internalminimax.chatnews.google.comnpm.imoauth2.googleapis.comollama.aiollama.comontheline.trincoll.eduopen-vsx.orgopen.bigmodel.cnopenrouter.aiplatform.claude.complatform.deepseek.complatform.minimax.ioplatform.minimaxi.complatform.moonshot.aiplatform.moonshot.cnplatform.openai.compoe.compptr.devpurl.oclc.orgpurl.orgraw.githubusercontent.comrequesty.airoocodeinc.github.ioroomote.devrouter.requesty.aisambanova.aischemas.microsoft.comschemas.openxmlformats.orgschemas.zwobble.orgstorage.googleapis.comtanstack.comvercel.comvpce-xxx.bedrock.region.vpce.amazonaws.comwww.allrecipes.comwww.anthropic.comwww.foodnetwork.comwww.googleapis.comwww.minimax.iowww.unicode.orgwww.w3.orgx.aix.comz.ai

medium first-party (npm): src A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

repo/src/services/code-index/embedders/openai-compatible.ts:67 → repo/src/services/code-index/embedders/openai-compatible.ts:207

hub Dependency data flows (149)

medium axios dependency Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.

pkgs/npm/[email protected]/lib/adapters/http.js:861 → pkgs/npm/[email protected]/lib/adapters/http.js:1062

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:27

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:19

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:19

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:83

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:103

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:109

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:117

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:124

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:133

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:161

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:163

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:52

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:66

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:76

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:80

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:82

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:84

medium @google/genai dependency A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:296 → pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:307

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:15 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:76

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:15 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:84

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:15 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:87

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:19

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:21

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:25

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:36

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:42

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:46

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:21

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/direct_url.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/direct_url.ts:23

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:21

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:25

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:34

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:40

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:47

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:59

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:76

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:96

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:97

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:118

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:131

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:16 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:80

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:9 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:31

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:25

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:26

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:32

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:58

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:13 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:55

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:10 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:52

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:29

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:24

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:27

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:38

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:9 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:42

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:13 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:36

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:23

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:20

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:19

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text_vertex_apikey.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text_vertex_apikey.ts:20

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:24

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:26

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:24

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:36

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_basic.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_basic.ts:19

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:70

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:56

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_get.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_get.ts:19

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_get.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_get.ts:22

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio.ts:38

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:8

→

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:42

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:8

→

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:66

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image.ts:38

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:8

→

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:41

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:8

→

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:64

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio_with_generate_content.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio_with_generate_content.ts:55

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image_with_generate_content.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image_with_generate_content.ts:52

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateful.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateful.ts:22

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateful.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateful.ts:31

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateless.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateless.ts:34

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateless.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateless.ts:54

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_structured_output_json.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_structured_output_json.ts:22

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_code_execution.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_code_execution.ts:21

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_computer_use.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_computer_use.ts:22

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_functions.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_functions.ts:52

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_google_search.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_google_search.ts:21

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mcp_server.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mcp_server.ts:29

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mime_type.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mime_type.ts:49

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_url_context.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_url_context.ts:22

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_with_config.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_with_config.ts:21

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:13 → pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:184

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_ephemeral.ts:13 → pkgs/npm/@[email protected]__reposrc/sdk-samples/live_ephemeral.ts:152

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/register_files.ts:9 → pkgs/npm/@[email protected]__reposrc/sdk-samples/register_files.ts:37

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/register_files.ts:9 → pkgs/npm/@[email protected]__reposrc/sdk-samples/register_files.ts:45

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:41

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:44

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:46

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:52

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:61

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:69

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:76

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:80

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:85

medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:89

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 → pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:30

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 → pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:42

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 → pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:45

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 → pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:51

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 → pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:53

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 → pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:59

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_chat_no_streaming.ts:3 → pkgs/npm/@[email protected]/examples/src/async_chat_no_streaming.ts:15

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_chat_prediction.ts:3 → pkgs/npm/@[email protected]/examples/src/async_chat_prediction.ts:33

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_chat_with_image_no_streaming.ts:3 → pkgs/npm/@[email protected]/examples/src/async_chat_with_image_no_streaming.ts:27

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_embeddings.ts:3 → pkgs/npm/@[email protected]/examples/src/async_embeddings.ts:20

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_files.ts:6 → pkgs/npm/@[email protected]/examples/src/async_files.ts:24

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_files.ts:6 → pkgs/npm/@[email protected]/examples/src/async_files.ts:28

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_files.ts:6 → pkgs/npm/@[email protected]/examples/src/async_files.ts:32

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_files.ts:6 → pkgs/npm/@[email protected]/examples/src/async_files.ts:36

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:4 → pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:127

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:4 → pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:128

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:4 → pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:147

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_function_calling_streaming.ts:3 → pkgs/npm/@[email protected]/examples/src/async_function_calling_streaming.ts:150

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_function_calling_streaming.ts:3 → pkgs/npm/@[email protected]/examples/src/async_function_calling_streaming.ts:151

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_json_format.ts:3 → pkgs/npm/@[email protected]/examples/src/async_json_format.ts:16

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_file.ts:6 → pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_file.ts:33

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_url.ts:3 → pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_url.ts:15

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_structured_outputs.ts:4 → pkgs/npm/@[email protected]/examples/src/async_structured_outputs.ts:52

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_structured_outputs.ts:4 → pkgs/npm/@[email protected]/examples/src/async_structured_outputs.ts:70

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/azure/async_chat_no_streaming.ts:3 → pkgs/npm/@[email protected]/examples/src/azure/async_chat_no_streaming.ts:27

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/prompt_lifecycle.ts:3 → pkgs/npm/@[email protected]/examples/src/prompt_lifecycle.ts:23

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/prompt_lifecycle.ts:3 → pkgs/npm/@[email protected]/examples/src/prompt_lifecycle.ts:38

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/realtime_microphone.ts:107 → pkgs/npm/@[email protected]/examples/src/realtime_microphone.ts:153

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/realtime_transcription.ts:162 → pkgs/npm/@[email protected]/examples/src/realtime_transcription.ts:213

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/reasoning.ts:3 → pkgs/npm/@[email protected]/examples/src/reasoning.ts:35

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/reasoning.ts:3 → pkgs/npm/@[email protected]/examples/src/reasoning.ts:42

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/reasoning.ts:3 → pkgs/npm/@[email protected]/examples/src/reasoning.ts:47

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/reasoning_multi_turn.ts:14 → pkgs/npm/@[email protected]/examples/src/reasoning_multi_turn.ts:61

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/reasoning_multi_turn.ts:14 → pkgs/npm/@[email protected]/examples/src/reasoning_multi_turn.ts:74

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/reasoning_response_shape.ts:7 → pkgs/npm/@[email protected]/examples/src/reasoning_response_shape.ts:30

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/reasoning_response_shape.ts:7 → pkgs/npm/@[email protected]/examples/src/reasoning_response_shape.ts:32

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:3 → pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:30

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:3 → pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:47

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:3 → pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:50

medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/packages/mistralai-azure/examples/chatComplete.example.ts:18 → pkgs/npm/@[email protected]/packages/mistralai-azure/examples/chatComplete.example.ts:35

</> First-Party Code

first-party (npm): src

npm first-party

medium pii_flow production #6551aac3e2c3d290 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

repo/src/services/code-index/embedders/openai-compatible.ts:207 · flow /tmp/closeopen-_y1xule_/repo/src/services/code-index/embedders/openai-compatible.ts:67 → /tmp/closeopen-_y1xule_/repo/src/services/code-index/embedders/openai-compatible.ts:207

			headers: {
				"Content-Type": "application/json",
				// Azure OpenAI uses 'api-key' header, while OpenAI uses 'Authorization'
				// We'll try 'api-key' first for Azure compatibility
				"api-key": this.apiKey,
				Authorization: `Bearer ${this.apiKey}`,
			},

A credential (read from the environment/filesystem, or parsed from the request URL) is applied as authorization on the same outbound request. This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

expand_more 453 low-confidence finding(s)

low env_fs test-only Excluded from app score #546ab2d3bb7b4d56 — Filesystem access.

repo/src/__mocks__/fs/promises.ts:153

	constants: require("fs").constants,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7e14143d0b806c8e — Filesystem access.

repo/src/__tests__/dist_assets.spec.ts:3

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e8ef6e5510a0df94 — Filesystem access.

repo/src/__tests__/migrateSettings.spec.ts:3

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e2b1175b409b3d2d — Filesystem access.

repo/src/api/providers/fetchers/__tests__/modelCache.spec.ts:49

import * as fsSync from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #bc99373d1098cd22 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/api/providers/fetchers/litellm.ts:31

		const response = await axios.get(url, { headers, timeout: 5000 })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #250186de82bdc242 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/api/providers/fetchers/lmstudio.ts:16

		await axios.get(`${baseUrl}/v1/models`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #1d0dd240402a5157 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/api/providers/fetchers/lmstudio.ts:69

		await axios.get(`${baseUrl}/v1/models`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #07fc5b08bf13234f — Filesystem access.

repo/src/api/providers/fetchers/modelCache.ts:2

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #43cd959ebded44f4 — Filesystem access.

repo/src/api/providers/fetchers/modelCache.ts:3

import * as fsSync from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #28c5a0b2e4ba418e — Filesystem access.

repo/src/api/providers/fetchers/modelCache.ts:48

	return exists ? JSON.parse(await fs.readFile(filePath, "utf8")) : undefined

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #13ed7039d2d86c4c — Filesystem access.

repo/src/api/providers/fetchers/modelCache.ts:277

			const data = fsSync.readFileSync(filePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a55a7113fe5c8658 — Filesystem access.

repo/src/api/providers/fetchers/modelEndpointCache.ts:2

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #57fbd62afe29a6d3 — Filesystem access.

repo/src/api/providers/fetchers/modelEndpointCache.ts:33

	return exists ? JSON.parse(await fs.readFile(filePath, "utf8")) : undefined

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #bf31559e3bf483e2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/api/providers/fetchers/ollama.ts:89

					axios
						.post<OllamaModelInfoResponse>(
							`${baseUrl}/api/show`,
							{
								model: ollamaModel.model,
							},
							{ headers },
						)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #f468b178f8455507 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/api/providers/fetchers/requesty.ts:21

		const response = await axios.get(modelsUrl.toString(), { headers })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #91a99a82ee9aaf92 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/api/providers/fetchers/unbound.ts:17

		const response = await axios.get("https://api.getunbound.ai/models", { headers })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #88fa75d74a642722 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/api/providers/lm-studio.ts:224

		const response = await axios.get(`${baseUrl}/v1/models`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #2e4c450101cf2bdc — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/api/providers/openai-codex.ts:515

			const response = await fetch(url, {
				method: "POST",
				headers,
				body: JSON.stringify(requestBody),
				signal: this.abortController?.signal,
			})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #3f50a7d78288d027 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/api/providers/openai-codex.ts:1206

			const response = await fetch(url, {
				method: "POST",
				headers,
				body: JSON.stringify(requestBody),
				signal: this.abortController.signal,
			})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #78bbf75d77e219c6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/api/providers/openai-native.ts:567

			const response = await fetch(url, {
				method: "POST",
				headers: {
					"Content-Type": "application/json",
					Authorization: `Bearer ${apiKey}`,
					originator: "roo-code",
					session_id: taskId || this.sessionId,
					"User-Agent": userAgent,
				},
				body: JSON.stringify(requestBody),
				signal: this.abortController.signal,
			})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #f8b82bd64fc3e509 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/api/providers/openai.ts:564

		const response = await axios.get(`${trimmedBaseUrl}/models`, config)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #854c50529624a01a — Filesystem access.

repo/src/api/providers/qwen-code.ts:86

			const credsStr = await fs.readFile(keyFile, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #07a7d05add962414 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/api/providers/qwen-code.ts:125

		const response = await fetch(QWEN_OAUTH_TOKEN_ENDPOINT, {
			method: "POST",
			headers: {
				"Content-Type": "application/x-www-form-urlencoded",
				Accept: "application/json",
			},
			body: objectToUrlEncoded(bodyData),
		})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #49f6f3fba9d13857 — Filesystem access.

repo/src/api/providers/qwen-code.ts:155

			await fs.writeFile(filePath, JSON.stringify(newCredentials, null, 2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #1d7c130ff7e361b3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/api/providers/utils/image-generation.ts:68

		const response = await fetch(`${baseURL}/chat/completions`, {
			method: "POST",
			headers: {
				Authorization: `Bearer ${authToken}`,
				"Content-Type": "application/json",
				"HTTP-Referer": "https://github.com/RooVetGit/Roo-Code",
				"X-Title": "Roo Code",
			},
			body: JSON.stringify({
				model,
				messages: [
					{
						role: "user",
						content: inputImage
							? [
									{
										type: "text",
										text: prompt,
									},
									{
										type: "image_url",
										image_url: {
											url: inputImage,
										},
									},
								]
							: prompt,
					},
				],
				modalities: ["image", "text"],
			}),
		})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #efc99592485fa523 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/api/providers/utils/image-generation.ts:225

		const response = await fetch(url, fetchOptions)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #12dfd903a691eedf — Filesystem access.

repo/src/core/config/CustomModesManager.ts:3

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6d2e7e1e84dc7c73 — Filesystem access.

repo/src/core/config/CustomModesManager.ts:185

			const content = await fs.readFile(filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2254a5a97841d5d2 — Filesystem access.

repo/src/core/config/CustomModesManager.ts:255

			await this.queueWrite(() => fs.writeFile(filePath, yaml.stringify({ customModes: [] }, { lineWidth: 0 })))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f95a286209858c80 — Environment-variable access.

repo/src/core/config/CustomModesManager.ts:263

		if (process.env.NODE_ENV === "test") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d74790b48be78eff — Filesystem access.

repo/src/core/config/CustomModesManager.ts:276

				const content = await fs.readFile(settingsPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #63ef43227910ed74 — Filesystem access.

repo/src/core/config/CustomModesManager.ts:469

			content = await fs.readFile(filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cf3922c1cb2d1937 — Filesystem access.

repo/src/core/config/CustomModesManager.ts:493

		await fs.writeFile(filePath, yaml.stringify(settings, { lineWidth: 0 }), "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #56f44339e4420d09 — Filesystem access.

repo/src/core/config/CustomModesManager.ts:606

			await fs.writeFile(filePath, yaml.stringify({ customModes: [] }, { lineWidth: 0 }))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #85a9cf2c47d42b39 — Filesystem access.

repo/src/core/config/CustomModesManager.ts:638

						const roomodesContent = await fs.readFile(roomodesPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4e37866442c6ecb1 — Filesystem access.

repo/src/core/config/CustomModesManager.ts:689

						const content = await fs.readFile(filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f70cd1514a510c6f — Filesystem access.

repo/src/core/config/CustomModesManager.ts:733

							const roomodesContent = await fs.readFile(roomodesPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0259dc6cb34da0c0 — Filesystem access.

repo/src/core/config/CustomModesManager.ts:788

							const content = await fs.readFile(filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7ea71a7a8794f783 — Filesystem access.

repo/src/core/config/CustomModesManager.ts:915

				await fs.writeFile(targetPath, ruleFile.content, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e86b00d7a5a8e0af — Filesystem access.

repo/src/core/config/__tests__/CustomModesManager.exportImportSlugChange.spec.ts:6

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8affe1cf565b93f2 — Filesystem access.

repo/src/core/config/__tests__/CustomModesManager.spec.ts:6

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #18b1ba3c5bce8b88 — Environment-variable access.

repo/src/core/config/__tests__/CustomModesManager.spec.ts:684

			const originalNodeEnv = process.env.NODE_ENV

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #23eaf5ecb6660c2a — Environment-variable access.

repo/src/core/config/__tests__/CustomModesManager.spec.ts:685

			process.env.NODE_ENV = "development"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9c03c28cafe7526d — Environment-variable access.

repo/src/core/config/__tests__/CustomModesManager.spec.ts:714

				process.env.NODE_ENV = originalNodeEnv

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #111c84da766d5696 — Filesystem access.

repo/src/core/config/__tests__/CustomModesManager.yamlEdgeCases.spec.ts:6

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #76ee48bb2079f4f3 — Filesystem access.

repo/src/core/config/__tests__/importExport.spec.ts:3

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #da04f4d95b25c09b — Filesystem access.

repo/src/core/config/importExport.ts:4

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6f916d70e7489656 — Filesystem access.

repo/src/core/config/importExport.ts:91

		const rawData = JSON.parse(await fs.readFile(filePath, "utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #713e287646d742e2 — Filesystem access.

repo/src/core/context-tracking/FileContextTracker.ts:7

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e897b9e8104e5653 — Filesystem access.

repo/src/core/context-tracking/FileContextTracker.ts:120

				return JSON.parse(await fs.readFile(filePath, "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #91b3d1a4734f8e5e — Filesystem access.

repo/src/core/ignore/RooIgnoreController.ts:3

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #615fb5d2b14dcc4c — Filesystem access.

repo/src/core/ignore/RooIgnoreController.ts:4

import fsSync from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9581f860972a1ac3 — Filesystem access.

repo/src/core/ignore/RooIgnoreController.ts:70

				const content = await fs.readFile(ignorePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1361e89091d7d9bc — Filesystem access.

repo/src/core/ignore/__tests__/RooIgnoreController.security.spec.ts:7

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ccd608980d18ff86 — Filesystem access.

repo/src/core/ignore/__tests__/RooIgnoreController.spec.ts:8

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b4d1a1b2f2eaac5b — Filesystem access.

repo/src/core/ignore/__tests__/RooIgnoreController.spec.ts:9

import * as fsSync from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d2474cf304072cc1 — Filesystem access.

repo/src/core/mentions/index.ts:1

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2189225ca1697388 — Filesystem access.

repo/src/core/prompts/__tests__/responses-rooignore.spec.ts:8

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a88e46d80c181c8a — Filesystem access.

repo/src/core/prompts/__tests__/utils.ts:1

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #88aa90959091e13d — Filesystem access.

repo/src/core/prompts/__tests__/utils.ts:2

import { PathLike } from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ba9fcf638b107be8 — Filesystem access.

repo/src/core/prompts/sections/__tests__/custom-instructions.spec.ts:56

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #068be289967aff0d — Filesystem access.

repo/src/core/prompts/sections/__tests__/custom-instructions.spec.ts:57

import type { PathLike } from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #463c18c857712101 — Filesystem access.

repo/src/core/prompts/sections/custom-instructions.ts:1

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4b8f97c91aea18b5 — Filesystem access.

repo/src/core/prompts/sections/custom-instructions.ts:4

import { Dirent } from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2cdd2abbd7b95cb9 — Filesystem access.

repo/src/core/prompts/sections/custom-instructions.ts:23

		const content = await fs.readFile(filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5b8b7e624c964c41 — Filesystem access.

repo/src/core/task-persistence/TaskHistoryStore.ts:1

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8be5f7989603600e — Filesystem access.

repo/src/core/task-persistence/TaskHistoryStore.ts:2

import * as fsSync from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7218a971605ec109 — Filesystem access.

repo/src/core/task-persistence/TaskHistoryStore.ts:371

			const raw = await fs.readFile(indexPath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #80de1dd0442de365 — Filesystem access.

repo/src/core/task-persistence/TaskHistoryStore.ts:452

			const raw = await fs.readFile(filePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #10bc32aa42635aff — Filesystem access.

repo/src/core/task-persistence/__tests__/TaskHistoryStore.crossInstance.spec.ts:3

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #20113a131da06ddf — Filesystem access.

repo/src/core/task-persistence/__tests__/TaskHistoryStore.crossInstance.spec.ts:20

		await fs.writeFile(filePath, JSON.stringify(data, null, "\t"), "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dccaba1262140345 — Filesystem access.

repo/src/core/task-persistence/__tests__/TaskHistoryStore.spec.ts:3

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #108f666fe554caab — Filesystem access.

repo/src/core/task-persistence/__tests__/TaskHistoryStore.spec.ts:20

		await fs.writeFile(filePath, JSON.stringify(data, null, "\t"), "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f74065727369c32d — Filesystem access.

repo/src/core/task-persistence/__tests__/TaskHistoryStore.spec.ts:70

			await fs.writeFile(path.join(tasksDir, "task-1", GlobalFileNames.historyItem), JSON.stringify(item1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cd147c3a77a7e11b — Filesystem access.

repo/src/core/task-persistence/__tests__/TaskHistoryStore.spec.ts:71

			await fs.writeFile(path.join(tasksDir, "task-2", GlobalFileNames.historyItem), JSON.stringify(item2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8cd9843b96164a28 — Filesystem access.

repo/src/core/task-persistence/__tests__/TaskHistoryStore.spec.ts:79

			await fs.writeFile(path.join(tasksDir, GlobalFileNames.historyIndex), JSON.stringify(index))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7bfc2c1ac658112a — Filesystem access.

repo/src/core/task-persistence/__tests__/TaskHistoryStore.spec.ts:150

			const raw = await fs.readFile(filePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2e05919c0d6acff6 — Filesystem access.

repo/src/core/task-persistence/__tests__/TaskHistoryStore.spec.ts:244

			await fs.writeFile(path.join(taskDir, GlobalFileNames.historyItem), JSON.stringify(item))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #06b4552bd20cafb8 — Filesystem access.

repo/src/core/task-persistence/__tests__/TaskHistoryStore.spec.ts:344

			await fs.writeFile(path.join(taskDir, GlobalFileNames.historyItem), JSON.stringify(existingItem))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a4d09edc47ef29e6 — Filesystem access.

repo/src/core/task-persistence/__tests__/TaskHistoryStore.spec.ts:355

			const raw = await fs.readFile(path.join(taskDir, GlobalFileNames.historyItem), "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #105c8bc2e5678ec8 — Filesystem access.

repo/src/core/task-persistence/__tests__/TaskHistoryStore.spec.ts:384

			const raw = await fs.readFile(indexPath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5f1518a52afc7ccd — Filesystem access.

repo/src/core/task-persistence/__tests__/TaskHistoryStore.spec.ts:404

			const raw = await fs.readFile(indexPath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7e7a794174dc8434 — Filesystem access.

repo/src/core/task-persistence/__tests__/TaskHistoryStore.spec.ts:420

			await fs.writeFile(filePath, JSON.stringify(updated))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #adf22fcd74c3e09d — Filesystem access.

repo/src/core/task-persistence/__tests__/apiMessages.spec.ts:5

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fc85190a5b94e7a2 — Filesystem access.

repo/src/core/task-persistence/__tests__/apiMessages.spec.ts:21

		await fs.writeFile(filePath, "<<<corrupt data>>>", "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7aef274c6800af5a — Filesystem access.

repo/src/core/task-persistence/__tests__/apiMessages.spec.ts:38

		await fs.writeFile(oldPath, "not json at all {[!", "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #44584d7f4b4af431 — Filesystem access.

repo/src/core/task-persistence/__tests__/apiMessages.spec.ts:60

		await fs.writeFile(filePath, JSON.stringify("hello"), "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #eeb0b3f65fb80a92 — Filesystem access.

repo/src/core/task-persistence/__tests__/apiMessages.spec.ts:77

		await fs.writeFile(oldPath, JSON.stringify({ key: "value" }), "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3fdde883fec84d33 — Filesystem access.

repo/src/core/task-persistence/__tests__/taskMessages.spec.ts:4

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #41b2fc99adb7a671 — Filesystem access.

repo/src/core/task-persistence/__tests__/taskMessages.spec.ts:77

		await fs.writeFile(filePath, "{not valid json!!!", "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dbfe447994cc64b7 — Filesystem access.

repo/src/core/task-persistence/__tests__/taskMessages.spec.ts:92

		await fs.writeFile(filePath, JSON.stringify("hello"), "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4029ba2a8bede0de — Filesystem access.

repo/src/core/task-persistence/apiMessages.ts:3

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f590131da818fba5 — Filesystem access.

repo/src/core/task-persistence/apiMessages.ts:51

		const fileContent = await fs.readFile(filePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #04879eb55d4c8614 — Filesystem access.

repo/src/core/task-persistence/apiMessages.ts:76

			const fileContent = await fs.readFile(oldPath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #49e778ac1a96fef6 — Filesystem access.

repo/src/core/task-persistence/taskMessages.ts:3

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a38757c411152b69 — Filesystem access.

repo/src/core/task-persistence/taskMessages.ts:27

			const parsedData = JSON.parse(await fs.readFile(filePath, "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #01f68a954eda8c8a — Filesystem access.

repo/src/core/tools/ApplyDiffTool.ts:2

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #be2940db02e23d51 — Filesystem access.

repo/src/core/tools/ApplyDiffTool.ts:70

			const originalContent: string = await fs.readFile(absolutePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ff85a7666d2378bf — Filesystem access.

repo/src/core/tools/ApplyPatchTool.ts:1

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9be83ebc17e9ccf4 — Filesystem access.

repo/src/core/tools/ApplyPatchTool.ts:91

				return await fs.readFile(absolutePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #46366091a6d92d8f — Filesystem access.

repo/src/core/tools/ApplyPatchTool.ts:423

				await fs.writeFile(moveAbsolutePath, newContent, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #783815d6429c4e99 — Filesystem access.

repo/src/core/tools/EditFileTool.ts:1

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #19acc2b9f91fd852 — Filesystem access.

repo/src/core/tools/EditFileTool.ts:234

					currentContent = await fs.readFile(absolutePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #794150b21c23bea7 — Filesystem access.

repo/src/core/tools/EditTool.ts:1

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2baedfe7a5a14d11 — Filesystem access.

repo/src/core/tools/EditTool.ts:92

				fileContent = await fs.readFile(absolutePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2ba01b8a4e05f722 — Filesystem access.

repo/src/core/tools/ExecuteCommandTool.ts:1

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c11e466967fddfc3 — Environment-variable access.

repo/src/core/tools/ExecuteCommandTool.ts:37

	return process.env.ROO_CLI_RUNTIME === "1" ? 0 : requestedAgentTimeout

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #964535bc8490421b — Filesystem access.

repo/src/core/tools/GenerateImageTool.ts:2

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c1acf6164497230b — Filesystem access.

repo/src/core/tools/GenerateImageTool.ts:87

				const imageBuffer = await fs.readFile(inputImageFullPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #976b513e548f3996 — Filesystem access.

repo/src/core/tools/GenerateImageTool.ts:237

			await fs.writeFile(absolutePath, imageBuffer)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #40369724227de500 — Filesystem access.

repo/src/core/tools/ReadCommandOutputTool.ts:1

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c6082f4d451d8b32 — Filesystem access.

repo/src/core/tools/ReadFileTool.ts:12

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6c9f93f26b1f9d41 — Filesystem access.

repo/src/core/tools/ReadFileTool.ts:217

					const buffer = await fs.readFile(fullPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #686e483c4f3937b3 — Filesystem access.

repo/src/core/tools/ReadFileTool.ts:770

				const rawContent = await fs.readFile(fullPath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #342bb6b29cb12742 — Filesystem access.

repo/src/core/tools/SearchReplaceTool.ts:1

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dc9cba701600d1a7 — Filesystem access.

repo/src/core/tools/SearchReplaceTool.ts:97

				fileContent = await fs.readFile(absolutePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c849c842ea32c9b1 — Filesystem access.

repo/src/core/tools/WriteToFileTool.ts:3

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6af702440fd7b432 — Filesystem access.

repo/src/core/tools/WriteToFileTool.ts:115

					task.diffViewProvider.originalContent = await fs.readFile(absolutePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6299cd9c15fb99cc — Filesystem access.

repo/src/core/tools/__tests__/ReadCommandOutputTool.test.ts:1

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3bc59988f39c07b5 — Filesystem access.

repo/src/core/tools/__tests__/editFileTool.spec.ts:2

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d7a3b7e153d7f966 — Filesystem access.

repo/src/core/tools/__tests__/editTool.spec.ts:2

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cb163591e678e1e8 — Filesystem access.

repo/src/core/tools/__tests__/executeCommand.spec.ts:5

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9f1212abe369b57c — Environment-variable access.

repo/src/core/tools/__tests__/executeCommandTool.spec.ts:51

	const originalCliRuntime = process.env.ROO_CLI_RUNTIME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #50571a905b531642 — Environment-variable access.

repo/src/core/tools/__tests__/executeCommandTool.spec.ts:111

		process.env.ROO_CLI_RUNTIME = originalCliRuntime

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2e35895c9be91fd5 — Environment-variable access.

repo/src/core/tools/__tests__/executeCommandTool.spec.ts:295

			process.env.ROO_CLI_RUNTIME = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1cbc63b8e6093545 — Environment-variable access.

repo/src/core/tools/__tests__/executeCommandTool.spec.ts:300

			delete process.env.ROO_CLI_RUNTIME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #514563f716f3e92f — Filesystem access.

repo/src/core/tools/__tests__/generateImageTool.test.ts:5

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #984f1593d6dcae0d — Filesystem access.

repo/src/core/tools/__tests__/searchReplaceTool.spec.ts:2

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6c5a3e1a8d05160b — Filesystem access.

repo/src/core/tools/helpers/imageHelpers.ts:2

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e9bac920c326bf21 — Filesystem access.

repo/src/core/tools/helpers/imageHelpers.ts:76

	const fileBuffer = await fs.readFile(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4f3af8b82ed395ca — Filesystem access.

repo/src/core/webview/ClineProvider.ts:3

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8a4656df3b1a6526 — Environment-variable access.

repo/src/core/webview/ClineProvider.ts:829

		const isCliRuntime = process.env.ROO_CLI_RUNTIME === "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b53ab6d55424e641 — Filesystem access.

repo/src/core/webview/ClineProvider.ts:1061

			const fs = require("fs")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #793cac614ac9dfdf — Filesystem access.

repo/src/core/webview/ClineProvider.ts:1066

				localPort = fs.readFileSync(portFilePath, "utf8").trim()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #cb690f4c4ab15bdc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/core/webview/ClineProvider.ts:1081

			await axios.get(`http://${localServerUrl}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #f4de72b84a444bc7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/core/webview/ClineProvider.ts:1584

			const response = await axios.post(`${baseUrlDomain}/api/v1/auth/keys`, { code })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #9cbf11e40eb46724 — Filesystem access.

repo/src/core/webview/ClineProvider.ts:1660

				apiConversationHistory = JSON.parse(await fs.readFile(apiConversationHistoryFilePath, "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5be8ea7b5c121a19 — Environment-variable access.

repo/src/core/webview/__tests__/ClineProvider.sticky-profile.spec.ts:181

		originalRooCliRuntimeEnv = process.env.ROO_CLI_RUNTIME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #56e77eb2070d12b4 — Environment-variable access.

repo/src/core/webview/__tests__/ClineProvider.sticky-profile.spec.ts:182

		delete process.env.ROO_CLI_RUNTIME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1b3d6220bde0fee2 — Environment-variable access.

repo/src/core/webview/__tests__/ClineProvider.sticky-profile.spec.ts:269

			delete process.env.ROO_CLI_RUNTIME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6787ed1344f585be — Environment-variable access.

repo/src/core/webview/__tests__/ClineProvider.sticky-profile.spec.ts:271

			process.env.ROO_CLI_RUNTIME = originalRooCliRuntimeEnv

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1663b1d4536fdff8 — Environment-variable access.

repo/src/core/webview/__tests__/ClineProvider.sticky-profile.spec.ts:479

			process.env.ROO_CLI_RUNTIME = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7ab9ded5d4d7cf0a — Environment-variable access.

repo/src/core/webview/__tests__/ClineProvider.sticky-profile.spec.ts:513

			process.env.ROO_CLI_RUNTIME = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c224a78de1aa1895 — Filesystem access.

repo/src/core/webview/__tests__/diagnosticsHandler.spec.ts:48

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0ad8255c46bd0563 — Filesystem access.

repo/src/core/webview/__tests__/webviewMessageHandler.readFileContent.spec.ts:64

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3e50a26538f73e78 — Filesystem access.

repo/src/core/webview/__tests__/webviewMessageHandler.spec.ts:144

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a439afc3b4182c7e — Filesystem access.

repo/src/core/webview/diagnosticsHandler.ts:3

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #48aa1f00d2425885 — Filesystem access.

repo/src/core/webview/diagnosticsHandler.ts:46

			const content = await fs.readFile(apiHistoryPath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #62e561ef19e4cea9 — Filesystem access.

repo/src/core/webview/diagnosticsHandler.ts:79

		await fs.writeFile(tempFilePath, fullContent, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0f5968d499018218 — Filesystem access.

repo/src/core/webview/webviewMessageHandler.ts:4

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8b283be1052537c8 — Filesystem access.

repo/src/core/webview/webviewMessageHandler.ts:1141

				const content = await fs.readFile(absPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #155459bf4f682140 — Filesystem access.

repo/src/core/webview/webviewMessageHandler.ts:1985

							await fs.writeFile(saveUri.fsPath, result.yaml, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #02a49b4d6842a067 — Filesystem access.

repo/src/core/webview/webviewMessageHandler.ts:2063

					const yamlContent = await fs.readFile(fileUri[0].fsPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f2899eabb0786074 — Filesystem access.

repo/src/core/webview/webviewMessageHandler.ts:2738

				await fs.writeFile(filePath, templateContent, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8efdc7019fad74e5 — Filesystem access.

repo/src/core/webview/webviewMessageHandler.ts:2841

					await fs.writeFile(tempFilePath, message.text, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4efdb00bced8657f — Filesystem access.

repo/src/core/webview/webviewMessageHandler.ts:2910

				const content = await fs.readFile(sourceFilePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2d2702605e019f7e — Filesystem access.

repo/src/core/webview/webviewMessageHandler.ts:2929

				await fs.writeFile(tempFilePath, prettifiedContent, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ca989176798d4d54 — Filesystem access.

repo/src/esbuild.mjs:2

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cc8e44f094bfdbb9 — Filesystem access.

repo/src/extension.ts:3

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4582f9873fd3f5b1 — Environment-variable access.

repo/src/extension.ts:237

	const socketPath = process.env.ROO_CODE_IPC_SOCKET_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4be9884dec7d9889 — Environment-variable access.

repo/src/extension.ts:241

	if (process.env.NODE_ENV === "development") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1666978442dc5d6b — Filesystem access.

repo/src/extension/api.ts:2

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #58d692dd95d19579 — Environment-variable access.

repo/src/i18n/setup.ts:7

const isTestEnv = process.env.NODE_ENV === "test"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aba736ac3f67ccf7 — Filesystem access.

repo/src/i18n/setup.ts:13

		const fs = require("fs")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1052d3b3dc3ae918 — Filesystem access.

repo/src/i18n/setup.ts:54

						const content = fs.readFileSync(filePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6bea59611d58f050 — Filesystem access.

repo/src/integrations/editor/DiffViewProvider.ts:3

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #56e7503415ee1f77 — Filesystem access.

repo/src/integrations/editor/DiffViewProvider.ts:70

			this.originalContent = await fs.readFile(absolutePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #00059c8a73c00dca — Filesystem access.

repo/src/integrations/editor/DiffViewProvider.ts:81

			await fs.writeFile(absolutePath, "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b6a15dea72e1c13f — Filesystem access.

repo/src/integrations/editor/DiffViewProvider.ts:660

		await fs.writeFile(absolutePath, content, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e1463ed6a36e3019 — Filesystem access.

repo/src/integrations/misc/__tests__/read-lines.spec.ts:1

import { promises as fs } from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a088d791cb467a56 — Filesystem access.

repo/src/integrations/misc/__tests__/read-lines.spec.ts:11

		await fs.writeFile(testFile, content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e11dbfbedb825051 — Filesystem access.

repo/src/integrations/misc/__tests__/read-lines.spec.ts:77

			await fs.writeFile(filepath, content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #179f6ed24900c425 — Filesystem access.

repo/src/integrations/misc/export-markdown.ts:59

		await vscode.workspace.fs.writeFile(saveUri, Buffer.from(markdownContent))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #faf914b96ec6f175 — Filesystem access.

repo/src/integrations/misc/extract-text-from-xlsx.ts:49

		await workbook.xlsx.readFile(filePathOrWorkbook)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3f770559afa206fc — Filesystem access.

repo/src/integrations/misc/extract-text.ts:5

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ba0f25cdce0ccc34 — Filesystem access.

repo/src/integrations/misc/extract-text.ts:12

	const dataBuffer = await fs.readFile(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #45a366c6a8f03a37 — Filesystem access.

repo/src/integrations/misc/extract-text.ts:23

	const data = await fs.readFile(filePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7d042c1cf58fc3f0 — Filesystem access.

repo/src/integrations/misc/extract-text.ts:108

		const rawContent = await fs.readFile(filePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #caf9f3715d86a7c1 — Filesystem access.

repo/src/integrations/misc/image-handler.ts:57

		await vscode.workspace.fs.writeFile(vscode.Uri.file(tempFilePath), imageBuffer)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e1622f5564e21d88 — Filesystem access.

repo/src/integrations/misc/image-handler.ts:62

				const imageData = await vscode.workspace.fs.readFile(vscode.Uri.file(tempFilePath))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #44e499a8dd2a4160 — Filesystem access.

repo/src/integrations/misc/image-handler.ts:118

		await vscode.workspace.fs.writeFile(saveUri, imageBuffer)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c9702ea73da5112d — Filesystem access.

repo/src/integrations/misc/line-counter.ts:1

import fs, { createReadStream } from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2516b3153dfebb27 — Filesystem access.

repo/src/integrations/misc/open-file.ts:107

				await vscode.workspace.fs.writeFile(uriToProcess, Buffer.from(contentToCreate, "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f935a3e478d789fc — Filesystem access.

repo/src/integrations/misc/process-images.ts:2

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f494c73569cb336a — Filesystem access.

repo/src/integrations/misc/process-images.ts:23

			const buffer = await fs.readFile(imagePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3ec2733e0009fd6a — Filesystem access.

repo/src/integrations/misc/read-lines.ts:9

import { createReadStream } from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #1b1229f9d0a70e51 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/integrations/openai-codex/oauth.ts:236

	const response = await fetch(OPENAI_CODEX_OAUTH_CONFIG.tokenEndpoint, {
		method: "POST",
		headers: {
			"Content-Type": "application/x-www-form-urlencoded",
		},
		body: body.toString(),
		signal: AbortSignal.timeout(30000),
	})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #01281c385ddf0db8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/integrations/openai-codex/oauth.ts:287

	const response = await fetch(OPENAI_CODEX_OAUTH_CONFIG.tokenEndpoint, {
		method: "POST",
		headers: {
			"Content-Type": "application/x-www-form-urlencoded",
		},
		body: body.toString(),
		signal: AbortSignal.timeout(30000),
	})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #6625ee96a7f105d5 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/src/integrations/openai-codex/rate-limits.ts:82

	const response = await fetch(WHAM_USAGE_URL, { method: "GET", headers })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #4233a4b32fa1f3fc — Filesystem access.

repo/src/integrations/terminal/OutputInterceptor.ts:1

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f1c07cd2cd45b0b4 — Environment-variable access.

repo/src/integrations/terminal/ShellIntegrationManager.ts:21

		if (process.env.ZDOTDIR) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #78c900956f3f69e5 — Environment-variable access.

repo/src/integrations/terminal/ShellIntegrationManager.ts:22

			env.ROO_ZDOTDIR = process.env.ZDOTDIR

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4b3f3325f1194a0f — Filesystem access.

repo/src/integrations/terminal/ShellIntegrationManager.ts:48

				vscode.workspace.fs.writeFile(vscode.Uri.file(zshrcPath), Buffer.from(zshrcContent)).then(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3f35928954a17eab — Filesystem access.

repo/src/integrations/terminal/ShellIntegrationManager.ts:81

			const fs = require("fs")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #130f0c51061c8c18 — Environment-variable access.

repo/src/integrations/terminal/__tests__/ExecaTerminalProcess.spec.ts:78

			process.env.EXISTING_VAR = "existing"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b001837c95529cd1 — Environment-variable access.

repo/src/integrations/terminal/__tests__/ExecaTerminalProcess.spec.ts:87

			process.env.LANG = "C"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #de1ae7a04cc8a19f — Environment-variable access.

repo/src/integrations/terminal/__tests__/ExecaTerminalProcess.spec.ts:88

			process.env.LC_ALL = "POSIX"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3d3226b3e7282ec0 — Filesystem access.

repo/src/integrations/terminal/__tests__/OutputInterceptor.test.ts:1

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4b1ace60ad8ab56f — Environment-variable access.

repo/src/integrations/terminal/__tests__/TerminalProcessExec.cmd.spec.ts:236

		console.log(`Running CMD tests on Windows ${process.env.OS} ${process.arch}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #402b7777a2554b02 — Environment-variable access.

repo/src/integrations/terminal/__tests__/setupTerminalTests.ts:48

	process.env.PWSH_AVAILABLE = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b2c181b237508f4b — Filesystem access.

repo/src/integrations/theme/getTheme.ts:3

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2ee90b738fc297a0 — Filesystem access.

repo/src/integrations/theme/getTheme.ts:49

						currentTheme = await fs.readFile(themePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2d24926dffe0852d — Filesystem access.

repo/src/integrations/theme/getTheme.ts:58

			currentTheme = await fs.readFile(
				path.join(getExtensionUri().fsPath, "integrations", "theme", "default-themes", filename),
				"utf-8",
			)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0c5936140d98ac3e — Filesystem access.

repo/src/integrations/theme/getTheme.ts:68

			const includeThemeString = await fs.readFile(
				path.join(getExtensionUri().fsPath, "integrations", "theme", "default-themes", parsed.include),
				"utf-8",
			)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #570ebffa58a519c6 — Filesystem access.

repo/src/services/checkpoints/ShadowCheckpointService.ts:1

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c03c43c5bd59e117 — Filesystem access.

repo/src/services/checkpoints/ShadowCheckpointService.ts:217

		await fs.writeFile(path.join(this.dotGitDir, "info", "exclude"), patterns.join("\n"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #88dfa65dc867be3d — Filesystem access.

repo/src/services/checkpoints/ShadowCheckpointService.ts:400

				: await fs.readFile(absPath, "utf8").catch(() => "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #41b413719f7362dc — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:3

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8c5a7467a80f9c74 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:41

	await fs.writeFile(testFile, textFileContent)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4af5c0d952cb42e3 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:81

				await fs.writeFile(testFile, "Ahoy, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f0b8095e9bd8d37b — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:85

				await fs.writeFile(testFile, "Goodbye, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #64ab59b0569d3094 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:113

				await fs.writeFile(newFile, "New file content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #01ccb8976e144712 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:126

				await fs.writeFile(fileToDelete, "New file content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0195bef707d84f50 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:144

				await fs.writeFile(testFile, "Ahoy, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e47b569793076ab9 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:151

				await fs.writeFile(testFile, "Hola, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1ffa64fee015171a — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:160

				expect(await fs.readFile(testFile, "utf-8")).toBe("Ahoy, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #61bc7482d9cc21a9 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:164

				expect(await fs.readFile(testFile, "utf-8")).toBe("Hola, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f50667da5f4de4a2 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:169

				expect(await fs.readFile(testFile, "utf-8")).toBe("Hello, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #973f310d54b0df06 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:178

				await fs.writeFile(unstagedFile, "Initial unstaged")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c771a7a6ef498906 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:179

				await fs.writeFile(stagedFile, "Initial staged")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fad9b364e496a1d6 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:180

				await fs.writeFile(mixedFile, "Initial mixed")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #454d4d64acb24cf3 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:185

				await fs.writeFile(unstagedFile, "Modified unstaged")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cd32005d09b08615 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:187

				await fs.writeFile(stagedFile, "Modified staged")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3814cca170231eb6 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:190

				await fs.writeFile(mixedFile, "Modified mixed - staged")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3e3d05d03996f5d6 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:192

				await fs.writeFile(mixedFile, "Modified mixed - unstaged")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c2eecf1d2ed0aab4 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:212

				expect(await fs.readFile(unstagedFile, "utf-8")).toBe("Modified unstaged")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9dd5664964d1a2db — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:213

				expect(await fs.readFile(stagedFile, "utf-8")).toBe("Modified staged")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #51cc04de24726e4a — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:214

				expect(await fs.readFile(mixedFile, "utf-8")).toBe("Modified mixed - unstaged")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c97a7eed146e7977 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:231

				await fs.writeFile(testFile, "Ahoy, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9c46aceea62e0892 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:242

				await fs.writeFile(untrackedFile, "I am untracked!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fe2868b9bc1d9a7c — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:254

				await fs.writeFile(testFile, "Changed tracked file")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f435e0fb44e4087c — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:260

				expect(await fs.readFile(untrackedFile, "utf-8")).toBe("I am untracked!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #af9ed33190b62475 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:261

				expect(await fs.readFile(testFile, "utf-8")).toBe("Hello, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #39237ea01eb7912b — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:266

				expect(await fs.readFile(untrackedFile, "utf-8")).toBe("I am untracked!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #10226a8d41187cba — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:267

				expect(await fs.readFile(testFile, "utf-8")).toBe("Changed tracked file")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ad588a68933335ee — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:271

				await fs.writeFile(testFile, "I am tracked!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #70457a7a536a1a5f — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:273

				await fs.writeFile(untrackedFile, "I am untracked!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2cb6bd8d3333f745 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:283

				await expect(fs.readFile(testFile, "utf-8")).rejects.toThrow()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #df1fe5a2e54c98ec — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:284

				await expect(fs.readFile(untrackedFile, "utf-8")).rejects.toThrow()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c438a2218c04aa78 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:288

				expect(await fs.readFile(testFile, "utf-8")).toBe("I am tracked!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ef6fcb164896ae1a — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:289

				expect(await fs.readFile(untrackedFile, "utf-8")).toBe("I am untracked!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7e9b62ab19493e61 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:293

				await expect(fs.readFile(testFile, "utf-8")).rejects.toThrow()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8952ab1ed0339636 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:294

				await expect(fs.readFile(untrackedFile, "utf-8")).rejects.toThrow()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1005fbfc6773d821 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:300

				await fs.writeFile(ignoredFile, "Initial ignored content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d93c09e1cd6c5d40 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:305

				await fs.writeFile(ignoredFile, "Modified ignored content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c68bc69e5bfe7d21 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:310

				expect(await fs.readFile(ignoredFile, "utf-8")).toBe("Modified ignored content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #33420436d8c8d1e6 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:316

				await fs.writeFile(gitattributesPath, "*.lfs filter=lfs diff=lfs merge=lfs -text")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bcb581b64bac6d2a — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:321

				expect((await fs.readFile(excludesPath, "utf-8")).split("\n")).not.toContain("*.lfs")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c273c532bb19da66 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:323

				expect((await fs.readFile(excludesPath, "utf-8")).split("\n")).toContain("*.lfs")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f08147574bbf380d — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:330

				await fs.writeFile(lfsFile, "Binary file content simulation")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9b49837fd33d6960 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:335

				await fs.writeFile(lfsFile, "Modified binary content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5d76bc9e764735f2 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:340

				expect(await fs.readFile(lfsFile, "utf-8")).toBe("Modified binary content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #446d554e52138f96 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:351

				await fs.writeFile(newTestFile, "Hello, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fac1f3dcbc8db6d1 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:352

				expect(await fs.readFile(newTestFile, "utf-8")).toBe("Hello, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e237c482514300f8 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:363

				await fs.writeFile(newTestFile, "Ahoy, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b21a749246093204 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:366

				expect(await fs.readFile(newTestFile, "utf-8")).toBe("Ahoy, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a997e593a03402e9 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:370

				expect(await fs.readFile(newTestFile, "utf-8")).toBe("Hello, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8630c3de19ec1ad3 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:374

				expect(await fs.readFile(newTestFile, "utf-8")).toBe("Ahoy, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7fa5435b1222957e — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:404

				await fs.writeFile(nestedFile, "Content in nested repo")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b4450542403998ae — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:410

				await fs.writeFile(mainFile, "Content in main repo")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4e84b024a110a4b9 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:417

				await fs.writeFile(headFile, "HEAD")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #02f423af3e30f841 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:466

				await fs.writeFile(mainFile, "Content in main repo")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ad8774fca97e1eb9 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:495

				await fs.writeFile(newTestFile, "Testing events!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #630cf41c7321196a — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:544

				await fs.writeFile(testFile, "Changed content for checkpoint event test")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e1887b9aff67a681 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:558

				await fs.writeFile(testFile, "Content for restore test")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #03a9756f27403591 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:563

				await fs.writeFile(testFile, "Changed after checkpoint")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #83057aac1aee9699 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:580

				expect(await fs.readFile(testFile, "utf-8")).toBe("Content for restore test")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3fd4bc5ccc94ef4c — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:611

				await fs.writeFile(testFile, "Content for multiple listeners test")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1e1361caa80a8c32 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:633

				await fs.writeFile(testFile, "Content for remove listener test - part 1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #895e8c8a93a388d7 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:644

				await fs.writeFile(testFile, "Content for remove listener test - part 2")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3c5eaddfc47dd75c — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:675

				await fs.writeFile(testFile, "Modified content for allowEmpty test")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c673730ca0a765ae — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:682

				await fs.writeFile(testFile, "Another modification for allowEmpty test")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #96b71d8a30aca08d — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:703

				await fs.writeFile(testFile, "Setup content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #650ff2cd82972e0a — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:707

				await fs.writeFile(testFile, "Hello, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ca136b6d3a1737fa — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:758

				await fs.writeFile(testFile, "Regular change")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #895b3d672dc60780 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:767

				await fs.writeFile(testFile, "Another regular change")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #edcbc70502482ea9 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:773

				expect(await fs.readFile(testFile, "utf-8")).toBe("Regular change")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #84b7626bc2cd264b — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:777

				expect(await fs.readFile(testFile, "utf-8")).toBe("Regular change")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c448877ebe42b601 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:780

				expect(await fs.readFile(testFile, "utf-8")).toBe("Another regular change")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7d97d1d24c179741 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:785

				await fs.writeFile(testFile, "Content before empty")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #15b812f4c7637b24 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:816

				await fs.writeFile(testFile, "Work done in new task")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e4c7df4c67e9f875 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:824

				expect(await fs.readFile(testFile, "utf-8")).toBe("Hello, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5681cd1e1a0c7605 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:833

				await fs.writeFile(path.join(hooksDir, "pre-commit"), "#!/bin/sh\nexit 1", { mode: 0o755 })

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #11c050a37a7e7eef — Environment-variable access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:839

				const originalTemplateDir = process.env.GIT_TEMPLATE_DIR

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ab7c44a2261a82ae — Environment-variable access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:840

				process.env.GIT_TEMPLATE_DIR = templateDir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2d14a239ef663712 — Environment-variable access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:865

						process.env.GIT_TEMPLATE_DIR = originalTemplateDir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a0ef2783882ead8c — Environment-variable access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:867

						delete process.env.GIT_TEMPLATE_DIR

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9b178e232b95ad07 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:892

				await fs.writeFile(externalFile, "External content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8ee2e7c8d9f78182 — Environment-variable access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:908

				const originalGitDir = process.env.GIT_DIR

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #416b81764315f0cd — Environment-variable access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:910

				process.env.GIT_DIR = externalDotGit

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a6f4666e2d44565b — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:926

					await fs.writeFile(testWorkspaceFile, "Modified with GIT_DIR set")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #205c469853f652ce — Environment-variable access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:932

					delete process.env.GIT_DIR

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #21e41e8fd748160f — Environment-variable access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:937

					process.env.GIT_DIR = externalDotGit

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #31ba01afb6705350 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:949

					await fs.writeFile(testWorkspaceFile, "Another modification")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8067bee306a0a38e — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:951

					expect(await fs.readFile(testWorkspaceFile, "utf-8")).toBe("Modified with GIT_DIR set")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0fa36e2359749692 — Environment-variable access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:955

						process.env.GIT_DIR = originalGitDir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7c55b2ed2537777f — Environment-variable access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:957

						delete process.env.GIT_DIR

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4b53f8b028d7266b — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:980

			await fs.writeFile(path.join(workspaceDir, "main.txt"), "main content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a64068266c06b900 — Filesystem access.

repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:1015

			await fs.writeFile(path.join(workspaceDir, "main.txt"), "main content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #01ef18199cfd70f6 — Filesystem access.

repo/src/services/checkpoints/__tests__/excludes.spec.ts:4

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d31a5cc1f2eea5b5 — Filesystem access.

repo/src/services/checkpoints/excludes.ts:1

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4ae5ec715253db78 — Filesystem access.

repo/src/services/checkpoints/excludes.ts:191

			return (await fs.readFile(attributesPath, "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #734f99023a9494f1 — Filesystem access.

repo/src/services/code-index/cache-manager.ts:38

			const cacheData = await vscode.workspace.fs.readFile(this.cachePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #70824516a9b5ec97 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/services/code-index/embedders/ollama.ts:73

			const response = await fetch(url, {
				method: "POST",
				headers: {
					"Content-Type": "application/json",
				},
				body: JSON.stringify({
					model: modelToUse,
					input: processedTexts, // Using 'input' as requested
				}),
				signal: controller.signal,
			})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #652b62b5ab35b630 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/services/code-index/embedders/ollama.ts:145

				const modelsResponse = await fetch(modelsUrl, {
					method: "GET",
					headers: {
						"Content-Type": "application/json",
					},
					signal: controller.signal,
				})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #c6d3a3aa4bbe019c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/services/code-index/embedders/ollama.ts:202

				const testResponse = await fetch(testUrl, {
					method: "POST",
					headers: {
						"Content-Type": "application/json",
					},
					body: JSON.stringify({
						model: this.defaultModelId,
						input: ["test"],
					}),
					signal: testController.signal,
				})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #aeb50d1d420c0a86 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/services/code-index/embedders/openai-compatible.ts:205

		const response = await fetch(url, {
			method: "POST",
			headers: {
				"Content-Type": "application/json",
				// Azure OpenAI uses 'api-key' header, while OpenAI uses 'Authorization'
				// We'll try 'api-key' first for Azure compatibility
				"api-key": this.apiKey,
				Authorization: `Bearer ${this.apiKey}`,
			},
			body: JSON.stringify({
				input: batchTexts,
				model: model,
				encoding_format: "base64",
			}),
		})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #8e84a4c6eaf99625 — Filesystem access.

repo/src/services/code-index/manager.ts:12

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6a0588fdcf498ffd — Filesystem access.

repo/src/services/code-index/manager.ts:374

			const content = await fs.readFile(ignorePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b490e815a248fc56 — Filesystem access.

repo/src/services/code-index/processors/__tests__/parser.spec.ts:6

import { readFile } from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #22d6ded2e4fd3dfe — Filesystem access.

repo/src/services/code-index/processors/__tests__/scanner.spec.ts:4

import { stat } from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8317dcee3826f7da — Filesystem access.

repo/src/services/code-index/processors/file-watcher.ts:446

			const fileContent = await vscode.workspace.fs.readFile(vscode.Uri.file(filePath))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ff8382378ceb1235 — Filesystem access.

repo/src/services/code-index/processors/parser.ts:1

import { readFile } from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8c59a4698063ef6c — Filesystem access.

repo/src/services/code-index/processors/parser.ts:51

				content = await readFile(filePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #31d872886d57e382 — Filesystem access.

repo/src/services/code-index/processors/scanner.ts:4

import { stat } from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b5959f40c9afe8ce — Filesystem access.

repo/src/services/code-index/processors/scanner.ts:141

					const content = await vscode.workspace.fs
						.readFile(vscode.Uri.file(filePath))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e67248607ba09a92 — Filesystem access.

repo/src/services/command/__tests__/frontmatter-commands.spec.ts:1

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #01a389e3cf8bbc9e — Filesystem access.

repo/src/services/command/__tests__/symlink-commands.spec.ts:1

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #05d0fda57ce13e2e — Filesystem access.

repo/src/services/command/commands.ts:1

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #57a38994a612889d — Filesystem access.

repo/src/services/command/commands.ts:3

import { Dirent } from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aff9a83b222b9878 — Filesystem access.

repo/src/services/command/commands.ts:195

			content = await fs.readFile(filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #13f45c5355696f6a — Filesystem access.

repo/src/services/command/commands.ts:201

					content = await fs.readFile(symlinkedPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ddda9b82c8a1f7a1 — Filesystem access.

repo/src/services/command/commands.ts:299

				const content = await fs.readFile(resolvedPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #151ff9edf28633c2 — Filesystem access.

repo/src/services/glob/__tests__/gitignore-integration.spec.ts:2

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4e0e67b07cd0eb05 — Filesystem access.

repo/src/services/glob/__tests__/gitignore-integration.spec.ts:56

		await fs.promises.writeFile(path.join(tempDir, ".gitignore"), "node_modules/\nbuild/\ndist/\n*.log\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8dd0cb26fb21b86a — Filesystem access.

repo/src/services/glob/__tests__/gitignore-integration.spec.ts:59

		await fs.promises.writeFile(path.join(tempDir, "src", "index.ts"), "console.log('hello')")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #db14b2cbd10d05cd — Filesystem access.

repo/src/services/glob/__tests__/gitignore-integration.spec.ts:60

		await fs.promises.writeFile(path.join(tempDir, "allowed-dir", "file.txt"), "content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9cddc0b474bd1058 — Filesystem access.

repo/src/services/glob/__tests__/gitignore-integration.spec.ts:114

		await fs.promises.writeFile(path.join(tempDir, ".gitignore"), "node_modules/\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #825c8c5092441cf8 — Filesystem access.

repo/src/services/glob/__tests__/gitignore-integration.spec.ts:117

		await fs.promises.writeFile(path.join(tempDir, "src", ".gitignore"), "temp/\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1b32c14e3f961077 — Filesystem access.

repo/src/services/glob/__tests__/gitignore-integration.spec.ts:164

		await fs.promises.writeFile(path.join(tempDir, ".gitignore"), "node_modules/\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6b927733b363e891 — Filesystem access.

repo/src/services/glob/__tests__/gitignore-test.spec.ts:2

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #011579a748b0c0dd — Filesystem access.

repo/src/services/glob/__tests__/gitignore-test.spec.ts:55

		await fs.promises.writeFile(path.join(tempDir, ".gitignore"), "node_modules/\nbuild/\nignored-dir/\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dd48720ef5addd7e — Filesystem access.

repo/src/services/glob/__tests__/gitignore-test.spec.ts:58

		await fs.promises.writeFile(path.join(tempDir, "src", "index.ts"), "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c40fb95f91c9bce7 — Filesystem access.

repo/src/services/glob/__tests__/gitignore-test.spec.ts:59

		await fs.promises.writeFile(path.join(tempDir, "node_modules", "package.json"), "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #895c2723532c15bb — Filesystem access.

repo/src/services/glob/__tests__/gitignore-test.spec.ts:60

		await fs.promises.writeFile(path.join(tempDir, "build", "output.js"), "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #140cf0b76220a8df — Filesystem access.

repo/src/services/glob/__tests__/gitignore-test.spec.ts:61

		await fs.promises.writeFile(path.join(tempDir, "ignored-dir", "file.txt"), "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #43af65c7a5325464 — Filesystem access.

repo/src/services/glob/__tests__/gitignore-test.spec.ts:108

		await fs.promises.writeFile(path.join(tempDir, ".gitignore"), "node_modules/\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8cf6481e52d0772e — Filesystem access.

repo/src/services/glob/__tests__/gitignore-test.spec.ts:111

		await fs.promises.writeFile(path.join(tempDir, "src", ".gitignore"), "temp/\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ea6c3a7abe9cefa0 — Filesystem access.

repo/src/services/glob/__tests__/list-files-limit.spec.ts:2

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7fe8050b2f548cfa — Filesystem access.

repo/src/services/glob/__tests__/list-files.spec.ts:55

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d9e68c83866e3519 — Filesystem access.

repo/src/services/glob/list-files.ts:3

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bcccb45f114baca5 — Filesystem access.

repo/src/services/glob/list-files.ts:340

			const content = await fs.promises.readFile(gitignoreFile, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5046fa1669b5ab34 — Filesystem access.

repo/src/services/mcp/McpHub.ts:1

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3a64604b4990ecba — Environment-variable access.

repo/src/services/mcp/McpHub.ts:286

		if (process.env.NODE_ENV === "test") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #19e44c327b470b6b — Filesystem access.

repo/src/services/mcp/McpHub.ts:326

			const content = await fs.readFile(filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c8acfa759a501f46 — Environment-variable access.

repo/src/services/mcp/McpHub.ts:364

		if (process.env.NODE_ENV === "test" || !vscode.workspace.createFileSystemWatcher) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #14c4546c609083b0 — Filesystem access.

repo/src/services/mcp/McpHub.ts:412

			const content = await fs.readFile(projectMcpPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7d328863447a3263 — Filesystem access.

repo/src/services/mcp/McpHub.ts:498

			await fs.writeFile(
				mcpSettingsFilePath,
				`{
  "mcpServers": {

  }
}`,
			)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bccea23a0a2adf67 — Environment-variable access.

repo/src/services/mcp/McpHub.ts:512

		if (process.env.NODE_ENV === "test" || !vscode.workspace.createFileSystemWatcher) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6465da7d607fc441 — Filesystem access.

repo/src/services/mcp/McpHub.ts:555

			const content = await fs.readFile(configPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #c58551e78c8043c9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/services/mcp/McpHub.ts:820

						return fetch(url, {
							...init,
							headers,
						})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #db2b72d6e65c4ba1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/services/mcp/McpHub.ts:989

			const response = await connection.client.request({ method: "tools/list" }, ListToolsResultSchema)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #6a4452671c855b0c — Filesystem access.

repo/src/services/mcp/McpHub.ts:1005

						const content = await fs.readFile(configPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #89e8374944c281d9 — Filesystem access.

repo/src/services/mcp/McpHub.ts:1011

					const content = await fs.readFile(configPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #2a2df0ddc0033363 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/services/mcp/McpHub.ts:1046

			const response = await connection.client.request({ method: "resources/list" }, ListResourcesResultSchema)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #d13f06df6782d464 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/services/mcp/McpHub.ts:1063

			const response = await connection.client.request(
				{ method: "resources/templates/list" },
				ListResourceTemplatesResultSchema,
			)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #b7a6ae6ef1443b51 — Filesystem access.

repo/src/services/mcp/McpHub.ts:1324

				const globalContent = await fs.readFile(globalPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9e9ef061e7565581 — Filesystem access.

repo/src/services/mcp/McpHub.ts:1336

					const projectContent = await fs.readFile(projectPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #08f4d607644b9fe2 — Filesystem access.

repo/src/services/mcp/McpHub.ts:1369

		const content = await fs.readFile(settingsPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bdc3481d2df9b536 — Filesystem access.

repo/src/services/mcp/McpHub.ts:1378

				const projectContent = await fs.readFile(projectMcpPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0302703eb93ed306 — Filesystem access.

repo/src/services/mcp/McpHub.ts:1519

		const content = await fs.readFile(configPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0aa45cf423ff885e — Filesystem access.

repo/src/services/mcp/McpHub.ts:1571

		const content = await fs.readFile(configPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4f8a242b7284bef9 — Filesystem access.

repo/src/services/mcp/McpHub.ts:1675

			const content = await fs.readFile(configPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #815b18a96ab6338d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/services/mcp/McpHub.ts:1719

		return await connection.client.request(
			{
				method: "resources/read",
				params: {
					uri,
				},
			},
			ReadResourceResultSchema,
		)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #c2278ecb224e74cf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/services/mcp/McpHub.ts:1756

		return await connection.client.request(
			{
				method: "tools/call",
				params: {
					name: toolName,
					arguments: toolArguments,
				},
			},
			CallToolResultSchema,
			{
				timeout,
			},
		)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #06642cb15bf1f45a — Filesystem access.

repo/src/services/mcp/McpHub.ts:1813

		const content = await fs.readFile(normalizedPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e64690b1ffb5d691 — Filesystem access.

repo/src/services/mcp/__tests__/McpHub.spec.ts:1

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #88ac25a4415b6fd1 — Filesystem access.

repo/src/services/mcp/__tests__/McpHub.spec.ts:48

		return fs.writeFile(filePath, JSON.stringify(data), "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6aac1696b42c02de — Filesystem access.

repo/src/services/roo-config/index.ts:3

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #09f1b6bffbd83830 — Filesystem access.

repo/src/services/roo-config/index.ts:147

		return await fs.readFile(filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c1b004806e41f868 — Filesystem access.

repo/src/services/search/file-search.ts:3

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d5958001d8d10fa4 — Filesystem access.

repo/src/services/skills/SkillsManager.ts:1

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d12088749aec26b2 — Filesystem access.

repo/src/services/skills/SkillsManager.ts:102

			const fileContent = await fs.readFile(skillMdPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cfd27cdb9079f279 — Filesystem access.

repo/src/services/skills/SkillsManager.ts:276

		const fileContent = await fs.readFile(skill.path, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #184c76921ecd86c4 — Filesystem access.

repo/src/services/skills/SkillsManager.ts:418

		await fs.writeFile(skillMdPath, skillContent, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #af1388718a37b2de — Filesystem access.

repo/src/services/skills/SkillsManager.ts:542

		const fileContent = await fs.readFile(skill.path, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #993f7b04188b4d52 — Filesystem access.

repo/src/services/skills/SkillsManager.ts:558

		await fs.writeFile(skill.path, newContent, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #df3f017aa6fee0d9 — Environment-variable access.

repo/src/services/skills/SkillsManager.ts:650

		if (process.env.NODE_ENV === "test" || !vscode.workspace.createFileSystemWatcher) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fec73a52dc35dc80 — Environment-variable access.

repo/src/services/skills/SkillsManager.ts:688

		if (process.env.NODE_ENV === "test" || !vscode.workspace.createFileSystemWatcher) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b6b7ea4b4b6318e4 — Filesystem access.

repo/src/services/tree-sitter/__tests__/helpers.ts:2

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #04352d83ad967776 — Environment-variable access.

repo/src/services/tree-sitter/__tests__/helpers.ts:19

export const DEBUG = process.env.DEBUG ? parseInt(process.env.DEBUG, 10) : 0

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #94420d94d8c6d3a7 — Filesystem access.

repo/src/services/tree-sitter/__tests__/markdownIntegration.spec.ts:13

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ebafabf56dd12c26 — Filesystem access.

repo/src/services/tree-sitter/index.ts:1

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #196e3936d8daaa2e — Filesystem access.

repo/src/services/tree-sitter/index.ts:122

		const fileContent = await fs.readFile(filePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d2566aa8f2a7331d — Filesystem access.

repo/src/services/tree-sitter/index.ts:305

	const fileContent = await fs.readFile(filePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ce654b2411c2c7df — Environment-variable access.

repo/src/shared/package.ts:11

	name: process.env.PKG_NAME || name,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1ce27001b0482408 — Environment-variable access.

repo/src/shared/package.ts:12

	version: process.env.PKG_VERSION || version,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dd299c5b64fabad5 — Environment-variable access.

repo/src/shared/package.ts:13

	outputChannel: process.env.PKG_OUTPUT_CHANNEL || "Roo-Code",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ffe1e66606a0971d — Environment-variable access.

repo/src/shared/package.ts:14

	sha: process.env.PKG_SHA,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #72f53c90e2395914 — Filesystem access.

repo/src/utils/__tests__/autoImportSettings.spec.ts:76

import fsPromises from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0ab962b74d8af956 — Environment-variable access.

repo/src/utils/__tests__/config.spec.ts:20

		process.env.TEST_VAR = "testValue"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #33fb3049b140c903 — Environment-variable access.

repo/src/utils/__tests__/config.spec.ts:28

		process.env.API_KEY = "12345"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #86f198dc201eaea3 — Environment-variable access.

repo/src/utils/__tests__/config.spec.ts:29

		process.env.ENDPOINT = "https://example.com"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5bce60f2fed6197e — Environment-variable access.

repo/src/utils/__tests__/config.spec.ts:80

		process.env.EXISTING_VAR = "exists"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1a39bfad2c689bb8 — Environment-variable access.

repo/src/utils/__tests__/config.spec.ts:116

		process.env.MUTATE_TEST = "mutated"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3652f7cd69eedb1d — Filesystem access.

repo/src/utils/__tests__/git.spec.ts:2

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #baad93e78fac6d1a — Environment-variable access.

repo/src/utils/__tests__/networkProxy.spec.ts:67

		delete process.env.GLOBAL_AGENT_HTTP_PROXY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #59cc84d9bb02d318 — Environment-variable access.

repo/src/utils/__tests__/networkProxy.spec.ts:68

		delete process.env.GLOBAL_AGENT_HTTPS_PROXY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #93d06e5a0e6f4d81 — Environment-variable access.

repo/src/utils/__tests__/networkProxy.spec.ts:69

		delete process.env.GLOBAL_AGENT_NO_PROXY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3c216108b5bd596b — Environment-variable access.

repo/src/utils/__tests__/networkProxy.spec.ts:70

		delete process.env.NODE_TLS_REJECT_UNAUTHORIZED

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #95b9ff49c2e15089 — Environment-variable access.

repo/src/utils/__tests__/networkProxy.spec.ts:103

			expect(process.env.GLOBAL_AGENT_HTTP_PROXY).toBeUndefined()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #82ea16a01d44071c — Environment-variable access.

repo/src/utils/__tests__/networkProxy.spec.ts:104

			expect(process.env.GLOBAL_AGENT_HTTPS_PROXY).toBeUndefined()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cc37c315d59eb523 — Environment-variable access.

repo/src/utils/__tests__/networkProxy.spec.ts:118

			expect(process.env.GLOBAL_AGENT_HTTP_PROXY).toBe("http://localhost:8080")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #97861286b9d22b82 — Environment-variable access.

repo/src/utils/__tests__/networkProxy.spec.ts:119

			expect(process.env.GLOBAL_AGENT_HTTPS_PROXY).toBe("http://localhost:8080")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2c0b6a46d6068979 — Environment-variable access.

repo/src/utils/__tests__/networkProxy.spec.ts:133

			expect(process.env.NODE_TLS_REJECT_UNAUTHORIZED).toBeUndefined()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bff1471f87749db5 — Environment-variable access.

repo/src/utils/__tests__/networkProxy.spec.ts:147

			expect(process.env.NODE_TLS_REJECT_UNAUTHORIZED).toBe("0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d29ca6588f7045e7 — Environment-variable access.

repo/src/utils/__tests__/networkProxy.spec.ts:305

			expect(process.env.NODE_TLS_REJECT_UNAUTHORIZED).toBeUndefined()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7c251eb383b7dd58 — Filesystem access.

repo/src/utils/__tests__/safeWriteJson.test.ts:1

import * as actualFsPromises from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #173b07e5ab92c0ab — Filesystem access.

repo/src/utils/__tests__/safeWriteJson.test.ts:2

import * as fsSyncActual from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7e29f005dea4ec20 — Filesystem access.

repo/src/utils/__tests__/safeWriteJson.test.ts:46

import * as fs from "fs/promises" // This will now be the mocked version

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #203e480393227b25 — Filesystem access.

repo/src/utils/__tests__/safeWriteJson.test.ts:73

		await fs.writeFile(currentTestFilePath, JSON.stringify({ initial: "content" }))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ef20cf45e8e042af — Filesystem access.

repo/src/utils/__tests__/safeWriteJson.test.ts:86

		const readContent = await fs.readFile(filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8867c4c4ac27aaa5 — Filesystem access.

repo/src/utils/__tests__/safeWriteJson.test.ts:384

		await fs.writeFile(lockTestFilePath, JSON.stringify({ initial: "lock test content" }))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1a05835e20e8b151 — Environment-variable access.

repo/src/utils/__tests__/shell.spec.ts:55

		delete process.env.SHELL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8e5b030175f0ad65 — Environment-variable access.

repo/src/utils/__tests__/shell.spec.ts:56

		delete process.env.COMSPEC

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #428e94c6dcacc497 — Environment-variable access.

repo/src/utils/__tests__/shell.spec.ts:128

			process.env.COMSPEC = "C:\\Windows\\System32\\cmd.exe"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d39e60310cb888c3 — Environment-variable access.

repo/src/utils/__tests__/shell.spec.ts:192

			process.env.COMSPEC = "D:\\CustomCmd\\cmd.exe"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f915117e8462858d — Environment-variable access.

repo/src/utils/__tests__/shell.spec.ts:244

			process.env.SHELL = "/usr/local/bin/zsh"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c31eb6ea311e7ab6 — Environment-variable access.

repo/src/utils/__tests__/shell.spec.ts:300

			process.env.SHELL = "/usr/bin/fish"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #87f6567a6cb60ae6 — Environment-variable access.

repo/src/utils/__tests__/shell.spec.ts:335

			process.env.SHELL = "/bin/zsh"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1efad73b06b2fb9e — Environment-variable access.

repo/src/utils/__tests__/shell.spec.ts:347

			delete process.env.SHELL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bcad17f6b2361f91 — Environment-variable access.

repo/src/utils/__tests__/shell.spec.ts:432

			process.env.COMSPEC = "C:\\Windows\\System32\\cmd.exe"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1cf9e7634847d23e — Environment-variable access.

repo/src/utils/__tests__/shell.spec.ts:462

			process.env.SHELL = "/opt/custom/shell"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #800264f06d011ebd — Environment-variable access.

repo/src/utils/__tests__/shell.spec.ts:482

			delete process.env.SHELL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d669156a1abd0ed0 — Filesystem access.

repo/src/utils/fs.ts:1

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e54e24f221d03499 — Filesystem access.

repo/src/utils/git.ts:3

import { promises as fs } from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #07d684f2871ba357 — Filesystem access.

repo/src/utils/git.ts:37

			const configContent = await fs.readFile(configPath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #66aaf007c0149e3e — Filesystem access.

repo/src/utils/git.ts:65

				const headContent = await fs.readFile(headPath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #033ad9387fce46ee — Filesystem access.

repo/src/utils/logging/CompactTransport.ts:5

import { writeFileSync, mkdirSync } from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #85b3e0384cbc0c11 — Filesystem access.

repo/src/utils/logging/CompactTransport.ts:65

			writeFileSync(this.filePath, "", { flag: "w" })

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9ae049310f6b535e — Filesystem access.

repo/src/utils/logging/CompactTransport.ts:73

			writeFileSync(this.filePath, JSON.stringify(sessionStart) + "\n", { flag: "w" })

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #472eb21b21d37196 — Filesystem access.

repo/src/utils/logging/CompactTransport.ts:104

			writeFileSync(this.filePath, output, { flag: "a" })

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7ae418e87dfab610 — Filesystem access.

repo/src/utils/logging/CompactTransport.ts:119

			writeFileSync(this.filePath, JSON.stringify(sessionEnd) + "\n", { flag: "a" })

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d16844866f6debce — Filesystem access.

repo/src/utils/logging/__tests__/CompactTransport.spec.ts:4

import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a3af5fa1e377f75c — Filesystem access.

repo/src/utils/logging/__tests__/CompactTransport.spec.ts:68

			const fileContent = fs.readFileSync(testLogPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fa79ea34cfa8e0f5 — Filesystem access.

repo/src/utils/logging/__tests__/CompactTransport.spec.ts:95

			const fileContent = fs.readFileSync(testLogPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1aa7570c850eb8d3 — Filesystem access.

repo/src/utils/logging/__tests__/CompactTransport.spec.ts:112

			const fileContent = fs.readFileSync(testLogPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #58b5ba53209b5b98 — Filesystem access.

repo/src/utils/logging/__tests__/CompactTransport.spec.ts:170

			const fileContent = fs.readFileSync(testLogPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b60d04df78c4ed1b — Environment-variable access.

repo/src/utils/logging/index.ts:25

export const logger = process.env.NODE_ENV === "test" ? new CompactLogger() : noopLogger

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #27da0faad8b1ebcc — Filesystem access.

repo/src/utils/migrateSettings.ts:3

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #47ae5e0ff681de73 — Filesystem access.

repo/src/utils/migrateSettings.ts:92

		const jsonContent = await fs.readFile(oldJsonPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #10ab5b4b2ed6d735 — Filesystem access.

repo/src/utils/migrateSettings.ts:102

			await fs.writeFile(newYamlPath, yamlContent, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0e447e84667cfbf6 — Environment-variable access.

repo/src/utils/networkProxy.ts:78

		process.env.NODE_TLS_REJECT_UNAUTHORIZED = originalNodeTlsRejectUnauthorized

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #450930621fd42fca — Environment-variable access.

repo/src/utils/networkProxy.ts:80

		delete process.env.NODE_TLS_REJECT_UNAUTHORIZED

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9ab6727cb26d2438 — Environment-variable access.

repo/src/utils/networkProxy.ts:100

		originalNodeTlsRejectUnauthorized = process.env.NODE_TLS_REJECT_UNAUTHORIZED

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8a227692d6a83fae — Environment-variable access.

repo/src/utils/networkProxy.ts:104

	process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0" // lgtm[js/disabling-certificate-validation]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f3d10d435ea3f534 — Environment-variable access.

repo/src/utils/networkProxy.ts:324

		process.env.GLOBAL_AGENT_HTTP_PROXY = config.serverUrl

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fd8423727993023b — Environment-variable access.

repo/src/utils/networkProxy.ts:325

		process.env.GLOBAL_AGENT_HTTPS_PROXY = config.serverUrl

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ed239be345685e23 — Environment-variable access.

repo/src/utils/networkProxy.ts:326

		process.env.GLOBAL_AGENT_NO_PROXY = "" // Proxy all requests

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b6b683be61679e5d — Filesystem access.

repo/src/utils/safeWriteJson.ts:1

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aa539ac113172dfa — Filesystem access.

repo/src/utils/safeWriteJson.ts:2

import * as fsSync from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #19f2febb431656c9 — Filesystem access.

repo/src/utils/storage.ts:3

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e5a1870f01cac226 — Filesystem access.

repo/src/utils/storage.ts:4

import { constants as fsConstants } from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm)

npm first-party

expand_more 12 low-confidence finding(s)

low env_fs test-only Excluded from app score #02f3765ee53bfbc4 — Filesystem access.

repo/scripts/bootstrap.mjs:4

import { existsSync, writeFileSync } from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2b57fd81be42bfb6 — Environment-variable access.

repo/scripts/bootstrap.mjs:6

if (process.env.BOOTSTRAP_IN_PROGRESS) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #abb3b054e8473dfb — Environment-variable access.

repo/scripts/bootstrap.mjs:12

if (process.env.npm_execpath && process.env.npm_execpath.includes("pnpm")) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #518baff4e5f2a303 — Filesystem access.

repo/scripts/bootstrap.mjs:38

		writeFileSync("package.json", JSON.stringify({ name: "temp", private: true }, null, 2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4cdf2fefdb00f844 — Filesystem access.

repo/scripts/find-missing-i18n-key.js:1

const fs = require("fs")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #06e5c6cc353a1f7e — Filesystem access.

repo/scripts/find-missing-i18n-key.js:104

		const json = JSON.parse(fs.readFileSync(filePath, "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #421adc14eca6975f — Filesystem access.

repo/scripts/find-missing-i18n-key.js:130

				const content = fs.readFileSync(filePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #34b3efad3f5b4bb6 — Filesystem access.

repo/scripts/find-missing-translations.js:15

const { promises: fs } = require("fs")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #666b5bcfa7552dd4 — Filesystem access.

repo/scripts/install-vsix.js:2

const fs = require("fs")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #71a8fa89a561b3a6 — Filesystem access.

repo/scripts/install-vsix.js:35

				fs.readFileSync("./apps/vscode-nightly/package.nightly.json", "utf-8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #48cb373576a14685 — Filesystem access.

repo/scripts/install-vsix.js:37

			const srcPackageJson = JSON.parse(fs.readFileSync("./src/package.json", "utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4bda0202dda6df91 — Filesystem access.

repo/scripts/install-vsix.js:42

			const packageJson = JSON.parse(fs.readFileSync("./src/package.json", "utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): apps/cli

npm first-party

expand_more 92 low-confidence finding(s)

low env_fs test-only Excluded from app score #f5283c1cb65704bd — Filesystem access.

repo/apps/cli/scripts/integration/cases/create-with-session-id-resume-loads-correct-session.ts:1

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4d5f4ff69d3498e4 — Environment-variable access.

repo/apps/cli/scripts/integration/cases/create-with-session-id-resume-loads-correct-session.ts:317

	const cliRoot = process.env.ROO_CLI_ROOT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0330201191c6bd99 — Environment-variable access.

repo/apps/cli/scripts/integration/cases/create-with-session-id-resume-loads-correct-session.ts:318

		? path.resolve(process.env.ROO_CLI_ROOT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e2eb43e4159e66e5 — Environment-variable access.

repo/apps/cli/scripts/integration/lib/stream-harness.ts:67

	const cliRoot = process.env.ROO_CLI_ROOT ? path.resolve(process.env.ROO_CLI_ROOT) : defaultCliRoot

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4ca871c3c3ae4aae — Filesystem access.

repo/apps/cli/scripts/integration/run.ts:1

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1c0130f50eeac900 — Filesystem access.

repo/apps/cli/src/__tests__/index.test.ts:16

import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #83ed4ac6575f3cc5 — Environment-variable access.

repo/apps/cli/src/__tests__/index.test.ts:23

const RUN_INTEGRATION_TESTS = process.env.RUN_CLI_INTEGRATION_TESTS === "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a7f32ee029a2e97c — Environment-variable access.

repo/apps/cli/src/__tests__/index.test.ts:24

const OPENROUTER_API_KEY = process.env.OPENROUTER_API_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c654503945cb14bd — Filesystem access.

repo/apps/cli/src/agent/__tests__/extension-host.test.ts:4

import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f7e381310231c7f2 — Environment-variable access.

repo/apps/cli/src/agent/__tests__/extension-host.test.ts:85

	const initialRooCliRuntimeEnv = process.env.ROO_CLI_RUNTIME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b39896e3f90a9c52 — Environment-variable access.

repo/apps/cli/src/agent/__tests__/extension-host.test.ts:90

			delete process.env.ROO_CLI_RUNTIME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f213826990b45d70 — Environment-variable access.

repo/apps/cli/src/agent/__tests__/extension-host.test.ts:92

			process.env.ROO_CLI_RUNTIME = initialRooCliRuntimeEnv

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0ebf8473e17c9e33 — Environment-variable access.

repo/apps/cli/src/agent/__tests__/extension-host.test.ts:101

			delete process.env.ROO_CLI_RUNTIME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d56a102b21ce1276 — Environment-variable access.

repo/apps/cli/src/agent/__tests__/extension-host.test.ts:103

			process.env.ROO_CLI_RUNTIME = initialRooCliRuntimeEnv

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fab88f53e7390183 — Environment-variable access.

repo/apps/cli/src/agent/__tests__/extension-host.test.ts:157

			delete process.env.ROO_CLI_RUNTIME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d937ddead6aaf416 — Environment-variable access.

repo/apps/cli/src/agent/__tests__/extension-host.test.ts:159

			expect(process.env.ROO_CLI_RUNTIME).toBe("1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #99be18b845965700 — Environment-variable access.

repo/apps/cli/src/agent/__tests__/extension-host.test.ts:493

			delete process.env.ROO_CLI_RUNTIME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #651f3ee9fbec2f9d — Environment-variable access.

repo/apps/cli/src/agent/__tests__/extension-host.test.ts:495

			expect(process.env.ROO_CLI_RUNTIME).toBe("1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cc4c7be122a78194 — Environment-variable access.

repo/apps/cli/src/agent/__tests__/extension-host.test.ts:499

			expect(process.env.ROO_CLI_RUNTIME).toBeUndefined()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #33e47650b4dd584b — Environment-variable access.

repo/apps/cli/src/agent/__tests__/extension-host.test.ts:503

			process.env.ROO_CLI_RUNTIME = "preexisting-value"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #32454ba6c287709d — Environment-variable access.

repo/apps/cli/src/agent/__tests__/extension-host.test.ts:505

			expect(process.env.ROO_CLI_RUNTIME).toBe("1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #22d065a154932853 — Environment-variable access.

repo/apps/cli/src/agent/__tests__/extension-host.test.ts:509

			expect(process.env.ROO_CLI_RUNTIME).toBe("preexisting-value")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8adb3616b9e07c11 — Filesystem access.

repo/apps/cli/src/agent/extension-host.ts:14

import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #963763c3a25f4843 — Environment-variable access.

repo/apps/cli/src/agent/extension-host.ts:64

const CLI_PACKAGE_ROOT = process.env.ROO_CLI_ROOT || findCliPackageRoot()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fb5b9349f76e3a4a — Environment-variable access.

repo/apps/cli/src/agent/extension-host.ts:181

		this.previousCliRuntimeEnv = process.env.ROO_CLI_RUNTIME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c6a9e8dc06d901fb — Environment-variable access.

repo/apps/cli/src/agent/extension-host.ts:182

		process.env.ROO_CLI_RUNTIME = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c0cd24558a0f71c5 — Environment-variable access.

repo/apps/cli/src/agent/extension-host.ts:609

			delete process.env.ROO_CLI_RUNTIME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #059cb95e38d36d54 — Environment-variable access.

repo/apps/cli/src/agent/extension-host.ts:611

			process.env.ROO_CLI_RUNTIME = this.previousCliRuntimeEnv

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a5b59451b866a934 — Filesystem access.

repo/apps/cli/src/commands/cli/__tests__/run.test.ts:1

import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4a5a66019dd202f2 — Filesystem access.

repo/apps/cli/src/commands/cli/__tests__/run.test.ts:25

		fs.writeFileSync(promptFilePath, promptContent)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cab4395e982c568b — Filesystem access.

repo/apps/cli/src/commands/cli/__tests__/run.test.ts:28

		const readContent = fs.readFileSync(promptFilePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1f8222b8684d28cf — Filesystem access.

repo/apps/cli/src/commands/cli/__tests__/run.test.ts:41

		fs.writeFileSync(promptFilePath, multiLinePrompt)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #221a2ed9c944c08b — Filesystem access.

repo/apps/cli/src/commands/cli/__tests__/run.test.ts:42

		const readContent = fs.readFileSync(promptFilePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fe6230040dd0afad — Filesystem access.

repo/apps/cli/src/commands/cli/__tests__/run.test.ts:52

		fs.writeFileSync(promptFilePath, longPrompt)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #beb1588e6d5bcd72 — Filesystem access.

repo/apps/cli/src/commands/cli/__tests__/run.test.ts:53

		const readContent = fs.readFileSync(promptFilePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #77fcf2e734ff40ce — Filesystem access.

repo/apps/cli/src/commands/cli/__tests__/run.test.ts:84

		fs.writeFileSync(promptFilePath, shellSensitivePrompt)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #18e300ff49e2b8e0 — Filesystem access.

repo/apps/cli/src/commands/cli/__tests__/run.test.ts:85

		const readContent = fs.readFileSync(promptFilePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #76405b3a43305fa0 — Filesystem access.

repo/apps/cli/src/commands/cli/list.ts:1

import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c7fc7231a67271b5 — Filesystem access.

repo/apps/cli/src/commands/cli/run.ts:1

import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #db98de403c226474 — Filesystem access.

repo/apps/cli/src/commands/cli/run.ts:67

		prompt = fs.readFileSync(flagOptions.promptFile, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #860c875f60b24181 — Filesystem access.

repo/apps/cli/src/lib/storage/__tests__/history.test.ts:1

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #54f248309c16a2ed — Filesystem access.

repo/apps/cli/src/lib/storage/__tests__/settings.test.ts:1

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #64a53823ef6e74f9 — Filesystem access.

repo/apps/cli/src/lib/storage/__tests__/settings.test.ts:62

			await fs.writeFile(expectedSettingsFile, JSON.stringify(settingsData), "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b004346a443e958f — Filesystem access.

repo/apps/cli/src/lib/storage/__tests__/settings.test.ts:74

			await fs.writeFile(expectedSettingsFile, JSON.stringify(settingsData), "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a30d73151b3fc38b — Filesystem access.

repo/apps/cli/src/lib/storage/__tests__/settings.test.ts:85

			const savedData = await fs.readFile(expectedSettingsFile, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #777444c02557b5cd — Filesystem access.

repo/apps/cli/src/lib/storage/__tests__/settings.test.ts:95

			const savedData = await fs.readFile(expectedSettingsFile, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3a236f9f045ffbc5 — Filesystem access.

repo/apps/cli/src/lib/storage/__tests__/settings.test.ts:111

			const savedData = await fs.readFile(expectedSettingsFile, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c00cd8a3ac13ffcb — Filesystem access.

repo/apps/cli/src/lib/storage/config-dir.ts:1

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bd54eb85e82ffc89 — Filesystem access.

repo/apps/cli/src/lib/storage/ephemeral.ts:3

import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f4494c1ca07246a0 — Filesystem access.

repo/apps/cli/src/lib/storage/history.ts:1

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #08636c1244cb63e8 — Filesystem access.

repo/apps/cli/src/lib/storage/history.ts:32

		const content = await fs.readFile(filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d4624b03fb7783d0 — Filesystem access.

repo/apps/cli/src/lib/storage/history.ts:77

		await fs.writeFile(filePath, JSON.stringify(data, null, "\t"), "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #51ccb54c6de6da91 — Filesystem access.

repo/apps/cli/src/lib/storage/settings.ts:1

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0f31665d397fafb6 — Filesystem access.

repo/apps/cli/src/lib/storage/settings.ts:15

		const data = await fs.readFile(settingsPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #875fe15d8ed9fa0a — Filesystem access.

repo/apps/cli/src/lib/storage/settings.ts:33

	await fs.writeFile(getSettingsPath(), JSON.stringify(merged, null, 2), {
		mode: 0o600,
	})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fcbc84adc4df2157 — Filesystem access.

repo/apps/cli/src/lib/utils/__tests__/extension.test.ts:1

import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #798c879584b1bb9f — Environment-variable access.

repo/apps/cli/src/lib/utils/__tests__/extension.test.ts:15

		delete process.env.ROO_EXTENSION_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f1ab7e2399ac66ff — Environment-variable access.

repo/apps/cli/src/lib/utils/__tests__/provider.test.ts:16

		process.env.ANTHROPIC_API_KEY = "test-anthropic-key"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ac244927a160e0d4 — Environment-variable access.

repo/apps/cli/src/lib/utils/__tests__/provider.test.ts:21

		process.env.OPENROUTER_API_KEY = "test-openrouter-key"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4c3c4b73ceaaa5da — Environment-variable access.

repo/apps/cli/src/lib/utils/__tests__/provider.test.ts:26

		process.env.OPENAI_API_KEY = "test-openai-key"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #65ca5ceeb4bf7235 — Environment-variable access.

repo/apps/cli/src/lib/utils/__tests__/provider.test.ts:31

		delete process.env.ANTHROPIC_API_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #59df87e10e7f0720 — Filesystem access.

repo/apps/cli/src/lib/utils/__tests__/shell.test.ts:1

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4176f2f9a952a76b — Filesystem access.

repo/apps/cli/src/lib/utils/extension.ts:2

import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c04b2d856ee0e269 — Environment-variable access.

repo/apps/cli/src/lib/utils/extension.ts:12

	if (process.env.ROO_EXTENSION_PATH) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #907322a0a3b138f4 — Environment-variable access.

repo/apps/cli/src/lib/utils/extension.ts:13

		const envPath = process.env.ROO_EXTENSION_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6144dc7c8bb0696d — Environment-variable access.

repo/apps/cli/src/lib/utils/provider.ts:19

	return process.env[envVar]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #899ad757a37ecaf1 — Filesystem access.

repo/apps/cli/src/lib/utils/shell.ts:1

import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4a68452f47849331 — Filesystem access.

repo/apps/cli/src/lib/utils/shell.ts:2

import { constants as fsConstants } from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3f378363763f61c2 — Filesystem access.

repo/apps/cli/src/lib/utils/version.ts:1

import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9bb336ed490bb90f — Filesystem access.

repo/apps/cli/src/lib/utils/version.ts:14

			const packageJson = JSON.parse(fs.readFileSync(candidate, "utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ae8950634eb3de52 — Environment-variable access.

repo/apps/cli/src/ui/components/Header.tsx:34

	const homeDir = process.env.HOME || process.env.USERPROFILE || ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aa1057ea362f4d3a — Environment-variable access.

repo/apps/cli/src/ui/components/Icon.tsx:82

	const envOverride = process.env.ROOCODE_NERD_FONT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4507830f82e23beb — Environment-variable access.

repo/apps/cli/src/ui/components/__tests__/ChatHistoryItem.test.tsx:10

		process.env.ROOCODE_NERD_FONT = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7a2bb8598c87e982 — Environment-variable access.

repo/apps/cli/src/ui/components/__tests__/ChatHistoryItem.test.tsx:15

		delete process.env.ROOCODE_NERD_FONT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #08efe4a94187c14f — Environment-variable access.

repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:10

		delete process.env.ROOCODE_NERD_FONT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8033e26c7f679815 — Environment-variable access.

repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:15

		delete process.env.ROOCODE_NERD_FONT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6c677aa32c18105f — Environment-variable access.

repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:54

			process.env.ROOCODE_NERD_FONT = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #551d859bcf02204b — Environment-variable access.

repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:60

			process.env.ROOCODE_NERD_FONT = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #aafd1fffb31e90cd — Environment-variable access.

repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:66

			process.env.ROOCODE_NERD_FONT = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4afd1073a814451d — Environment-variable access.

repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:72

			process.env.ROOCODE_NERD_FONT = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d01f5e26bf756760 — Environment-variable access.

repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:78

			process.env.ROOCODE_NERD_FONT = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8787887072df57da — Environment-variable access.

repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:82

			process.env.ROOCODE_NERD_FONT = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #29c9e4138f1b7e60 — Environment-variable access.

repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:89

			process.env.ROOCODE_NERD_FONT = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f877c4c3a9c05e63 — Environment-variable access.

repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:94

			process.env.ROOCODE_NERD_FONT = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dcf9390e4ae21662 — Environment-variable access.

repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:102

			process.env.ROOCODE_NERD_FONT = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #001454c3d644133a — Environment-variable access.

repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:113

			process.env.ROOCODE_NERD_FONT = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c8731dfad2f0896e — Environment-variable access.

repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:125

			process.env.ROOCODE_NERD_FONT = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0d5fbeaa297b7e74 — Environment-variable access.

repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:135

			process.env.ROOCODE_NERD_FONT = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #559c3132d6346244 — Environment-variable access.

repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:144

			process.env.ROOCODE_NERD_FONT = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2cd9a9869d5b64fe — Environment-variable access.

repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:150

			process.env.ROOCODE_NERD_FONT = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4889ef4d642df5cb — Environment-variable access.

repo/apps/cli/src/ui/components/__tests__/TodoDisplay.test.tsx:11

		process.env.ROOCODE_NERD_FONT = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4e11edd0d2d49259 — Environment-variable access.

repo/apps/cli/src/ui/components/__tests__/TodoDisplay.test.tsx:16

		delete process.env.ROOCODE_NERD_FONT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): apps/docs

npm first-party

expand_more 3 low-confidence finding(s)

low egress production #7ac812f7df6e5ef3 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/apps/docs/src/components/GitHubInstallButtons/index.tsx:20

		const res = await fetch("https://api.github.com/repos/RooCodeInc/Roo-Code")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #c552b9a9436b8d29 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/apps/docs/src/components/GitHubInstallButtons/index.tsx:38

		const res = await fetch("https://marketplace.visualstudio.com/_apis/public/gallery/extensionquery", {
			method: "POST",
			headers: {
				"Content-Type": "application/json",
				Accept: "application/json;api-version=7.1-preview.1",
			},
			body: JSON.stringify({
				filters: [
					{
						criteria: [
							{
								filterType: 7,
								value: "RooVeterinaryInc.roo-cline",
							},
						],
					},
				],
				flags: 914,
			}),
		})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #0d4118fe364e92e8 — Environment-variable access.

repo/apps/docs/src/theme/SearchPage/index.tsx:200

					) : process.env.NODE_ENV === "production" ? (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): apps/vscode-e2e

npm first-party

expand_more 60 low-confidence finding(s)

low env_fs production #25bf1deaa84b1310 — Filesystem access.

repo/apps/vscode-e2e/src/runTest.ts:3

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aaba1941fe4ea9c6 — Environment-variable access.

repo/apps/vscode-e2e/src/runTest.ts:25

		const testGrep = process.argv.find((arg, i) => process.argv[i - 1] === "--grep") || process.env.TEST_GREP

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e01123b2a0c2acb4 — Environment-variable access.

repo/apps/vscode-e2e/src/runTest.ts:26

		const testFile = process.argv.find((arg, i) => process.argv[i - 1] === "--file") || process.env.TEST_FILE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #772585b5808a38bb — Environment-variable access.

repo/apps/vscode-e2e/src/runTest.ts:41

			version: process.env.VSCODE_VERSION || "1.101.2",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #84c023a60c8c8e19 — Environment-variable access.

repo/apps/vscode-e2e/src/suite/index.ts:21

		openRouterApiKey: process.env.OPENROUTER_API_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fadb107ae9c21ea4 — Environment-variable access.

repo/apps/vscode-e2e/src/suite/index.ts:35

	if (process.env.TEST_GREP) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6c76f64d2be07365 — Environment-variable access.

repo/apps/vscode-e2e/src/suite/index.ts:36

		mochaOptions.grep = process.env.TEST_GREP

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #79881ef9a8212361 — Environment-variable access.

repo/apps/vscode-e2e/src/suite/index.ts:37

		console.log(`Running tests matching pattern: ${process.env.TEST_GREP}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #42312589660030f0 — Environment-variable access.

repo/apps/vscode-e2e/src/suite/index.ts:45

	if (process.env.TEST_FILE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c3aa96da3acecb4b — Environment-variable access.

repo/apps/vscode-e2e/src/suite/index.ts:46

		const specificFile = process.env.TEST_FILE.endsWith(".js")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #caba2f638bda80ff — Environment-variable access.

repo/apps/vscode-e2e/src/suite/index.ts:47

			? process.env.TEST_FILE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #70597303e28ed8d1 — Environment-variable access.

repo/apps/vscode-e2e/src/suite/index.ts:48

			: `${process.env.TEST_FILE}.js`

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3e35e2559aa861e3 — Environment-variable access.

repo/apps/vscode-e2e/src/suite/index.ts:57

		throw new Error(`No test files found matching criteria: ${process.env.TEST_FILE || "all tests"}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3c6631ad654b304f — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/apply-diff.test.ts:2

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #efd185aaef9cb165 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/apply-diff.test.ts:90

			await fs.writeFile(file.path, file.content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4ffc5f04e9452425 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/apply-diff.test.ts:247

			const actualContent = await fs.readFile(testFile.path, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2adbcce67e39f650 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/apply-diff.test.ts:362

			const actualContent = await fs.readFile(testFile.path, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1d42337ff238327e — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/apply-diff.test.ts:474

			const actualContent = await fs.readFile(testFile.path, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b413e0132cc97c76 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/apply-diff.test.ts:585

			const actualContent = await fs.readFile(testFile.path, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d2579ef7864d4b79 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/apply-diff.test.ts:728

			const actualContent = await fs.readFile(testFile.path, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #03a93ca897edfec6 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/execute-command.test.ts:2

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a4799c03953d2e84 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/execute-command.test.ts:54

				await fs.writeFile(file.path, file.content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #972c0dca500f2f63 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/execute-command.test.ts:205

			const content = await fs.readFile(testFile.path, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b0cee07127aeafa6 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/execute-command.test.ts:314

			const content = await fs.readFile(outputPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b4f176c421300c9f — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/execute-command.test.ts:436

			const content = await fs.readFile(testFile.path, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #41b747159d722ee6 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/list-files.test.ts:2

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7e6d022e2a0d5b1f — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/list-files.test.ts:63

		await fs.writeFile(testFiles.rootFile1, "This is root file 1 content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ea91763fac72f8d6 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/list-files.test.ts:64

		await fs.writeFile(
			testFiles.rootFile2,
			`function testFunction() {
	console.log("Hello from root file 2");
}`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4fc57603722d7db3 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/list-files.test.ts:72

		await fs.writeFile(
			testFiles.nestedFile1,
			`# Nested File 1

This is a markdown file in the nested directory.`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d56bbeb3d525ff1c — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/list-files.test.ts:78

		await fs.writeFile(
			testFiles.nestedFile2,
			`{
	"name": "nested-config",
	"version": "1.0.0",
	"description": "Test configuration file"
}`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c5eb254c4e9a71b0 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/list-files.test.ts:88

		await fs.writeFile(
			testFiles.deepNestedFile,
			`interface TestInterface {
	id: number;
	name: string;
}`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #49642debe0e35286 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/list-files.test.ts:97

		await fs.writeFile(testFiles.hiddenFile, "Hidden file content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #12a7cfabe32e4539 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/list-files.test.ts:100

		await fs.writeFile(
			testFiles.configFile,
			`app:
  name: test-app
  version: 1.0.0
database:
  host: localhost
  port: 5432`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8c97fdf60536327c — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/list-files.test.ts:111

		await fs.writeFile(
			testFiles.readmeFile,
			`# List Files Test Directory

This directory contains various files and subdirectories for testing the list_files tool functionality.

## Structure
- Root files (txt, js)
- Nested directory with files (md, json)
- Deep nested directory with TypeScript file
- Hidden file
- Configuration files (yaml)`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #73ccf68c445de1ee — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/list-files.test.ts:444

			await fs.writeFile(sourceFile, "Content from symlinked file")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #24d21a8ada97869e — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/read-file.test.ts:2

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1926d324e3094ffa — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/read-file.test.ts:43

		await fs.writeFile(testFiles.simple, "Hello, World!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ad68df8f78746ea7 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/read-file.test.ts:44

		await fs.writeFile(testFiles.multiline, "Line 1\nLine 2\nLine 3\nLine 4\nLine 5")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8cf517746d05f766 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/read-file.test.ts:45

		await fs.writeFile(testFiles.empty, "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cf02cb058fbed548 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/read-file.test.ts:52

		await fs.writeFile(testFiles.large, largeContent)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #34267913af82ecc7 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/read-file.test.ts:55

		await fs.writeFile(
			testFiles.xmlContent,
			"<root>\n  <child>Test content</child>\n  <data>Some data</data>\n</root>",
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #66be630366776050 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/read-file.test.ts:62

		await fs.writeFile(testFiles.nested, "Content in nested directory")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ae58d34f533ccc33 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/search-files.test.ts:2

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #817259c00f260867 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/search-files.test.ts:47

		await fs.writeFile(
			testFiles.jsFile,
			`function calculateTotal(items) {
	return items.reduce((sum, item) => sum + item.price, 0)
}

function validateUser(user) {
	if (!user.email || !user.name) {
		throw new Error("Invalid user data")
	}
	return true
}

// TODO: Add more validation functions
const API_URL = "https://api.example.com"
export { calculateTotal, validateUser }`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0ac686d15fa59077 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/search-files.test.ts:66

		await fs.writeFile(
			testFiles.tsFile,
			`interface User {
	id: number
	name: string
	email: string
	isActive: boolean
}

interface Product {
	id: number
	title: string
	price: number
	category: string
}

class UserService {
	async getUser(id: number): Promise<User> {
		// TODO: Implement user fetching
		throw new Error("Not implemented")
	}
	
	async updateUser(user: User): Promise<void> {
		// Implementation here
	}
}

export { User, Product, UserService }`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #375215a6273b1a57 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/search-files.test.ts:97

		await fs.writeFile(
			testFiles.jsonFile,
			`{
	"name": "test-app",
	"version": "1.0.0",
	"description": "A test application for search functionality",
	"main": "index.js",
	"scripts": {
		"start": "node index.js",
		"test": "jest",
		"build": "webpack"
	},
	"dependencies": {
		"express": "^4.18.0",
		"lodash": "^4.17.21"
	},
	"devDependencies": {
		"jest": "^29.0.0",
		"webpack": "^5.0.0"
	}
}`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2fb37f305c11837e — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/search-files.test.ts:121

		await fs.writeFile(
			testFiles.textFile,
			`# Project Documentation

This is a test project for demonstrating search functionality.

## Features
- User management
- Product catalog
- Order processing
- Payment integration

## Installation
1. Clone the repository
2. Run npm install
3. Configure environment variables
4. Start the application

## API Endpoints
- GET /users - List all users
- POST /users - Create new user
- PUT /users/:id - Update user
- DELETE /users/:id - Delete user

## TODO
- Add authentication
- Implement caching
- Add error handling
- Write more tests`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f3df26d8519c947b — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/search-files.test.ts:154

		await fs.writeFile(
			testFiles.nestedJsFile,
			`// Nested utility functions
function formatCurrency(amount) {
	return new Intl.NumberFormat('en-US', {
		style: 'currency',
		currency: 'USD'
	}).format(amount)
}

function debounce(func, wait) {
	let timeout
	return function executedFunction(...args) {
		const later = () => {
			clearTimeout(timeout)
			func(...args)
		}
		clearTimeout(timeout)
		timeout = setTimeout(later, wait)
	}
}

module.exports = { formatCurrency, debounce }`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3b07d7c45bd30f67 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/search-files.test.ts:180

		await fs.writeFile(
			testFiles.configFile,
			`# Application Configuration
app:
  name: "Test Application"
  version: "1.0.0"
  port: 3000
  
database:
  host: "localhost"
  port: 5432
  name: "testdb"
  user: "testuser"
  
redis:
  host: "localhost"
  port: 6379
  
logging:
  level: "info"
  file: "app.log"`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #138dfc5bf1d74b51 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/search-files.test.ts:204

		await fs.writeFile(
			testFiles.readmeFile,
			`# Search Files Test Project

This project contains various file types for testing the search_files functionality.

## File Types Included

- **JavaScript files** (.js) - Contains functions and exports
- **TypeScript files** (.ts) - Contains interfaces and classes  
- **JSON files** (.json) - Configuration and package files
- **Text files** (.txt) - Documentation and notes
- **YAML files** (.yaml) - Configuration files
- **Markdown files** (.md) - Documentation

## Search Patterns to Test

1. Function definitions: \`function\\s+\\w+\`
2. TODO comments: \`TODO.*\`
3. Import/export statements: \`(import|export).*\`
4. Interface definitions: \`interface\\s+\\w+\`
5. Configuration keys: \`"\\w+":\\s*\`

## Expected Results

The search should find matches across different file types and provide context for each match.`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fc02cc02ff53cc3d — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/use-mcp-tool.test.ts:2

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3e836c2aecabf2d1 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/use-mcp-tool.test.ts:37

		await fs.writeFile(testFiles.simple, "Initial content for MCP test")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #49c6817dd810251c — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/use-mcp-tool.test.ts:38

		await fs.writeFile(testFiles.testData, JSON.stringify({ test: "data", value: 42 }, null, 2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f27e3ad43287ea85 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/use-mcp-tool.test.ts:53

		await fs.writeFile(testFiles.mcpConfig, JSON.stringify(mcpConfig, null, 2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #93400bc2d15d0be9 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/write-to-file.test.ts:2

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f50bda0524e7d084 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/write-to-file.test.ts:189

					actualContent = await fs.readFile(wsFilePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2a552ab2f3693f96 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/write-to-file.test.ts:204

						actualContent = await fs.readFile(location, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ea0987032ef9d9f3 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/write-to-file.test.ts:368

					actualContent = await fs.readFile(wsNestedPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f146b36f42a82986 — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/write-to-file.test.ts:378

						actualContent = await fs.readFile(wsFilePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #375b5fadf4c52d6e — Filesystem access.

repo/apps/vscode-e2e/src/suite/tools/write-to-file.test.ts:393

					actualContent = await fs.readFile(nestedPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): apps/vscode-nightly

npm first-party

expand_more 7 low-confidence finding(s)

low env_fs production #7614c4b5e8be8fdb — Filesystem access.

repo/apps/vscode-nightly/esbuild.mjs:2

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7d59e552bf15e54d — Filesystem access.

repo/apps/vscode-nightly/esbuild.mjs:17

	const overrideJson = JSON.parse(fs.readFileSync(path.join(__dirname, "package.nightly.json"), "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9f70c161302ae59d — Filesystem access.

repo/apps/vscode-nightly/esbuild.mjs:86

					const packageJson = JSON.parse(fs.readFileSync(path.join(srcDir, "package.json"), "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e72f9801a362c77d — Filesystem access.

repo/apps/vscode-nightly/esbuild.mjs:94

					fs.writeFileSync(path.join(buildDir, "package.json"), JSON.stringify(generatedPackageJson, null, 2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #656314b31f739047 — Filesystem access.

repo/apps/vscode-nightly/esbuild.mjs:108

					const nlsPkg = JSON.parse(fs.readFileSync(path.join(srcDir, "package.nls.json"), "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ae635cfcc1a89fca — Filesystem access.

repo/apps/vscode-nightly/esbuild.mjs:111

						fs.readFileSync(path.join(__dirname, "package.nls.nightly.json"), "utf8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #792d55c931ec0f89 — Filesystem access.

repo/apps/vscode-nightly/esbuild.mjs:114

					fs.writeFileSync(
						path.join(buildDir, "package.nls.json"),
						JSON.stringify({ ...nlsPkg, ...nlsNightlyPkg }, null, 2),
					)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/core

npm first-party

expand_more 74 low-confidence finding(s)

low env_fs test-only Excluded from app score #d6b9022d053b01b0 — Filesystem access.

repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:1

import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cb81535e4e59347c — Filesystem access.

repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:29

		fs.writeFileSync(fakeScriptPath, "#!/usr/bin/env node\nconsole.log('fake esbuild')")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c5a0b2b9f61a218c — Filesystem access.

repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:66

		fs.writeFileSync(
			inputFile,
			`
				export const greeting = "Hello, World!"
				export function add(a: number, b: number): number {
					return a + b
				}
			`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #13bd05ed9cd4b182 — Filesystem access.

repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:89

		const outputContent = fs.readFileSync(outputFile, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2b3f2788118ac8f0 — Filesystem access.

repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:98

		fs.writeFileSync(inputFile, `export const value = 42`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1d9a622feb0707d0 — Filesystem access.

repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:102

		const outputContent = fs.readFileSync(outputFile, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ce0bb6c55159a4b2 — Filesystem access.

repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:111

		fs.writeFileSync(inputFile, `export const value = {{{ invalid syntax`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c5630d95aea3ba51 — Filesystem access.

repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:129

		fs.writeFileSync(libFile, `export const PI = 3.14159`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e95b6e119d7a6d2c — Filesystem access.

repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:130

		fs.writeFileSync(
			mainFile,
			`
				import { PI } from "./lib.js"
				export const circumference = (r: number) => 2 * PI * r
			`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7104bd751c706951 — Filesystem access.

repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:140

		const outputContent = fs.readFileSync(outputFile, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9608983391143cac — Filesystem access.

repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:149

		fs.writeFileSync(inputFile, `export const value = process.env.NODE_ENV`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3e4de8aad4f6d498 — Filesystem access.

repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:162

		fs.writeFileSync(
			inputFile,
			`
				import fs from "fs"
				export function fileExists(p: string): boolean {
					return fs.existsSync(p)
				}
			`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #33b173b6b2de2467 — Filesystem access.

repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:180

		const outputContent = fs.readFileSync(outputFile, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f9a5076f3b30c235 — Filesystem access.

repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:189

		fs.writeFileSync(inputFile, `export const greeting = "Hello"`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f61a639770158aaa — Filesystem access.

repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:199

		const outputContent = fs.readFileSync(outputFile, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ba1f635725794fef — Filesystem access.

repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:208

		fs.writeFileSync(inputFile, `export const value = 42`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #756ec19e4628481d — Filesystem access.

repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:217

		const outputContent = fs.readFileSync(outputFile, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3068e3747f2cdc64 — Filesystem access.

repo/packages/core/src/custom-tools/custom-tool-registry.ts:11

import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ac1140f5a92de104 — Filesystem access.

repo/packages/core/src/custom-tools/esbuild-runner.ts:13

import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3c534ab7fea82bcb — Filesystem access.

repo/packages/core/src/debug-log/index.ts:18

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #030ae9fc9c6dbdc2 — Filesystem access.

repo/packages/core/src/task-history/__tests__/task-history.spec.ts:1

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #09fd4039d8355075 — Filesystem access.

repo/packages/core/src/task-history/__tests__/task-history.spec.ts:23

		await fs.writeFile(
			path.join(tasksDir, "_index.json"),
			JSON.stringify({
				entries: [
					{ id: "a", task: "Task A", ts: 100, status: "completed" },
					{ id: "b", task: "Task B", ts: 300, mode: "code" },
					{ id: "invalid", ts: 200 },
				],
			}),
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9c784a8d24bb6559 — Filesystem access.

repo/packages/core/src/task-history/__tests__/task-history.spec.ts:47

		await fs.writeFile(
			path.join(tasksDir, "_index.json"),
			JSON.stringify({
				entries: [{ id: "a", task: "Task A", ts: 100 }],
			}),
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f1e52a57a96df8fa — Filesystem access.

repo/packages/core/src/task-history/__tests__/task-history.spec.ts:53

		await fs.writeFile(
			path.join(tasksDir, "c", "history_item.json"),
			JSON.stringify({ id: "c", task: "Task C", ts: 500, workspace: "/tmp/project" }),
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a91d87f04edefec4 — Filesystem access.

repo/packages/core/src/task-history/__tests__/task-history.spec.ts:70

		await fs.writeFile(
			path.join(tasksDir, "_index.json"),
			JSON.stringify({
				entries: [
					{ id: "stale", task: "Stale Task", ts: 999 },
					{ id: "live", task: "Live Task", ts: 100 },
				],
			}),
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2c642f497ed955b2 — Filesystem access.

repo/packages/core/src/task-history/__tests__/task-history.spec.ts:93

		await fs.writeFile(path.join(tasksDir, "_index.json"), "{not-valid-json")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #370ca1d6a0aedf76 — Filesystem access.

repo/packages/core/src/task-history/__tests__/task-history.spec.ts:94

		await fs.writeFile(
			path.join(tasksDir, "good", "history_item.json"),
			JSON.stringify({ id: "good", task: "Good Task", ts: 10, status: "active" }),
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0987f38033796eca — Filesystem access.

repo/packages/core/src/task-history/__tests__/task-history.spec.ts:98

		await fs.writeFile(path.join(tasksDir, "bad-json", "history_item.json"), "{oops")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #df32751338b1a2b5 — Filesystem access.

repo/packages/core/src/task-history/__tests__/task-history.spec.ts:99

		await fs.writeFile(
			path.join(tasksDir, "bad-shape", "history_item.json"),
			JSON.stringify({ id: "bad-shape", task: 123, ts: "not-a-number" }),
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3fb1634665ad0f97 — Filesystem access.

repo/packages/core/src/task-history/index.ts:1

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #09e78b06e43006db — Filesystem access.

repo/packages/core/src/task-history/index.ts:50

		const raw = await fs.readFile(filePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #10cb702547866358 — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:1

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #42ca77d7cec67310 — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:37

			await fs.writeFile(path.join(tempDir, ".worktreeinclude"), "node_modules")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #78521f10bd89fc10 — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:66

			await fs.writeFile(path.join(repoDir, "README.md"), "test")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7d7528dffe21873b — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:75

			await fs.writeFile(path.join(repoDir, ".worktreeinclude"), "node_modules")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ecd10299785e5a9e — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:86

			await fs.writeFile(path.join(tempDir, ".worktreeinclude"), "node_modules")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d43f75f601e829fd — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:87

			await fs.writeFile(path.join(tempDir, ".gitignore"), gitignoreContent)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c11abf6f7ca10aa6 — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:98

			await fs.writeFile(path.join(tempDir, ".gitignore"), gitignoreContent)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #999259c48ab872b7 — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:108

			await fs.writeFile(path.join(tempDir, ".worktreeinclude"), "node_modules")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a54c01ad4cedf3a7 — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:132

			const fileContent = await fs.readFile(path.join(tempDir, ".worktreeinclude"), "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0e6324fbbec45767 — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:137

			await fs.writeFile(path.join(tempDir, ".worktreeinclude"), "old content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #04de39625f820c30 — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:142

			const fileContent = await fs.readFile(path.join(tempDir, ".worktreeinclude"), "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5863540e0c2bba97 — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:159

			await fs.writeFile(path.join(sourceDir, ".gitignore"), "node_modules")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #853d9cc5ded6d67c — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:167

			await fs.writeFile(path.join(sourceDir, ".worktreeinclude"), "node_modules")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7a8eef38182bb012 — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:176

			await fs.writeFile(path.join(sourceDir, ".worktreeinclude"), "node_modules")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b5c0fa0cee748af7 — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:177

			await fs.writeFile(path.join(sourceDir, ".gitignore"), ".env")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #60c5d02f32004573 — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:187

			await fs.writeFile(path.join(sourceDir, ".worktreeinclude"), "node_modules")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9edca763b7f797bb — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:188

			await fs.writeFile(path.join(sourceDir, ".gitignore"), "node_modules")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8e0f42bb431a893d — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:191

			await fs.writeFile(path.join(sourceDir, "node_modules", "package.json"), '{"name": "test"}')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #164683c015655241 — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:197

			const copiedContent = await fs.readFile(path.join(targetDir, "node_modules", "package.json"), "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e83b04847ad185ff — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:205

			await fs.writeFile(path.join(sourceDir, ".worktreeinclude"), "node_modules\ndist")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #28b9ed3e015352bc — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:206

			await fs.writeFile(path.join(sourceDir, ".gitignore"), "node_modules\n.env")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c6b7245b00ee16ad — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:209

			await fs.writeFile(path.join(sourceDir, ".env"), "SECRET=123")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8280528128549e2a — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:210

			await fs.writeFile(path.join(sourceDir, "node_modules", "test.txt"), "test")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7bc4d7cb34eb540f — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:211

			await fs.writeFile(path.join(sourceDir, "dist", "main.js"), "console.log('dist')")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #96617b0a2f6ad70d — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:236

			await fs.writeFile(path.join(sourceDir, ".worktreeinclude"), ".git")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5dd0ccb9c9e4ad00 — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:237

			await fs.writeFile(path.join(sourceDir, ".gitignore"), ".git")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0b197973895d125d — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:239

			await fs.writeFile(path.join(sourceDir, ".git", "config"), "[core]")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5c1e833f5ee9296c — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:247

			await fs.writeFile(path.join(sourceDir, ".worktreeinclude"), ".env.local")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #334ae4868e2549d5 — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:248

			await fs.writeFile(path.join(sourceDir, ".gitignore"), ".env.local")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #81c34847a7168995 — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:249

			await fs.writeFile(path.join(sourceDir, ".env.local"), "LOCAL_VAR=value")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #76737128354721af — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:254

			const copiedContent = await fs.readFile(path.join(targetDir, ".env.local"), "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #477b57e2207e3408 — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:259

			await fs.writeFile(path.join(sourceDir, ".worktreeinclude"), "# comment\nnode_modules\n# another comment")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #39572dc63f12bd1d — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:260

			await fs.writeFile(path.join(sourceDir, ".gitignore"), "node_modules")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6dc90fa1cde16d52 — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:270

			await fs.writeFile(path.join(sourceDir, ".worktreeinclude"), "node_modules\n.env.local")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d0e86af93c3f1048 — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:271

			await fs.writeFile(path.join(sourceDir, ".gitignore"), "node_modules\n.env.local")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5168808d0ba283a1 — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:273

			await fs.writeFile(path.join(sourceDir, "node_modules", "test.txt"), "test")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0fc94adf914dc39e — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:274

			await fs.writeFile(path.join(sourceDir, ".env.local"), "LOCAL_VAR=value")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2692c52051a83370 — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:296

			await fs.writeFile(path.join(sourceDir, ".worktreeinclude"), "node_modules")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f7fa367176bd9199 — Filesystem access.

repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:297

			await fs.writeFile(path.join(sourceDir, ".gitignore"), "node_modules")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #06992ea5dee34bbb — Filesystem access.

repo/packages/core/src/worktree/worktree-include.ts:9

import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ce9752dc89e87ed8 — Filesystem access.

repo/packages/core/src/worktree/worktree-include.ts:88

			gitignoreContent = await fs.readFile(gitignorePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #951207919a7c347b — Filesystem access.

repo/packages/core/src/worktree/worktree-include.ts:105

		await fs.writeFile(path.join(dir, ".worktreeinclude"), content, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ff19604c8e33df14 — Filesystem access.

repo/packages/core/src/worktree/worktree-include.ts:380

			const content = await fs.readFile(filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/types

npm first-party

expand_more 14 low-confidence finding(s)

low env_fs test-only Excluded from app score #f4e94e3a9be60465 — Filesystem access.

repo/packages/types/scripts/generate-roomodes-schema.ts:11

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #13f742f7151ea861 — Filesystem access.

repo/packages/types/scripts/generate-roomodes-schema.ts:23

fs.writeFileSync(outPath, JSON.stringify(jsonSchema, null, "\t") + "\n", "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b8524155f8e3d456 — Filesystem access.

repo/packages/types/scripts/publish-npm.cjs:3

const fs = require("fs")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3bd8fa1835850914 — Filesystem access.

repo/packages/types/scripts/publish-npm.cjs:36

		const packageContent = JSON.parse(fs.readFileSync(filePath, "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #723a02adf84cbd97 — Filesystem access.

repo/packages/types/scripts/publish-npm.cjs:39

		fs.writeFileSync(filePath, JSON.stringify(packageContent, null, 2) + "\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #298ea8249e195599 — Filesystem access.

repo/packages/types/scripts/publish-npm.cjs:187

		const monorepoPackageContent = fs.readFileSync(monorepoPackagePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e8ad9eb7f721c2e8 — Filesystem access.

repo/packages/types/scripts/publish-npm.cjs:192

		const npmMetadataContent = fs.readFileSync(npmMetadataPath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f3070dd25f889a9e — Filesystem access.

repo/packages/types/scripts/publish-npm.cjs:217

		fs.writeFileSync(npmPackagePath, outputContent)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c95ce1fd3ab40caf — Filesystem access.

repo/packages/types/scripts/publish-npm.cjs:239

		const npmPackage = JSON.parse(fs.readFileSync(npmPackagePath, "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #98531604cd10781c — Filesystem access.

repo/packages/types/scripts/publish-npm.cjs:256

		const updatedPackage = JSON.parse(fs.readFileSync(npmPackagePath, "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a7375a28be4a4dc5 — Filesystem access.

repo/packages/types/src/__tests__/roomodes-schema-sync.spec.ts:2

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #be16f7590edfb141 — Filesystem access.

repo/packages/types/src/__tests__/roomodes-schema-sync.spec.ts:20

		const checkedIn = JSON.parse(fs.readFileSync(schemaPath, "utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3a170720b3c4de1a — Filesystem access.

repo/packages/types/src/__tests__/roomodes-schema.spec.ts:11

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #38ca6342388d04fa — Filesystem access.

repo/packages/types/src/__tests__/roomodes-schema.spec.ts:22

		schema = JSON.parse(fs.readFileSync(schemaPath, "utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/vscode-shim

npm first-party

expand_more 71 low-confidence finding(s)

low env_fs test-only Excluded from app score #32221a1c5dda0460 — Filesystem access.

repo/packages/vscode-shim/src/__tests__/ExtensionContext.test.ts:2

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #65369a27907f4847 — Filesystem access.

repo/packages/vscode-shim/src/__tests__/FileSystemAPI.test.ts:1

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d860f43db9df8084 — Filesystem access.

repo/packages/vscode-shim/src/__tests__/FileSystemAPI.test.ts:26

			fs.writeFileSync(filePath, "test content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #43bbaec38ef7c3d8 — Filesystem access.

repo/packages/vscode-shim/src/__tests__/FileSystemAPI.test.ts:56

			fs.writeFileSync(filePath, "Hello, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #be55f0c9ab3bf3f7 — Filesystem access.

repo/packages/vscode-shim/src/__tests__/FileSystemAPI.test.ts:59

			const content = await fsAPI.readFile(uri)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0218ad7d39791f2e — Filesystem access.

repo/packages/vscode-shim/src/__tests__/FileSystemAPI.test.ts:67

			await expect(fsAPI.readFile(uri)).rejects.toThrow()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a093429d1000c37a — Filesystem access.

repo/packages/vscode-shim/src/__tests__/FileSystemAPI.test.ts:76

			await fsAPI.writeFile(uri, new TextEncoder().encode("Written content"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1ee4fd4be8b06d61 — Filesystem access.

repo/packages/vscode-shim/src/__tests__/FileSystemAPI.test.ts:78

			expect(fs.readFileSync(filePath, "utf-8")).toBe("Written content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #50bfba0b49d28685 — Filesystem access.

repo/packages/vscode-shim/src/__tests__/FileSystemAPI.test.ts:85

			await fsAPI.writeFile(uri, new TextEncoder().encode("Nested content"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #453430e55203ccaa — Filesystem access.

repo/packages/vscode-shim/src/__tests__/FileSystemAPI.test.ts:87

			expect(fs.readFileSync(filePath, "utf-8")).toBe("Nested content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bcc0076c094d0046 — Filesystem access.

repo/packages/vscode-shim/src/__tests__/FileSystemAPI.test.ts:94

			fs.writeFileSync(filePath, "delete me")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1fc79741b4acc328 — Filesystem access.

repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:1

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #07027b54f211ecc3 — Filesystem access.

repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:106

			fs.writeFileSync(filePath, "Line 1\nLine 2\nLine 3")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #099fda637e142ae2 — Filesystem access.

repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:119

			fs.writeFileSync(filePath, "Line 1\nLine 2\nLine 3")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8a4a45e4b2064669 — Filesystem access.

repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:133

			fs.writeFileSync(filePath, "Hello\nWorld")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #46cdac814e7e3807 — Filesystem access.

repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:146

			fs.writeFileSync(filePath, "content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6828dcc699c93a77 — Filesystem access.

repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:166

			fs.writeFileSync(filePath, "Hello World")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a11c432376f6ad6e — Filesystem access.

repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:175

			expect(fs.readFileSync(filePath, "utf-8")).toBe("Hi World")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5e7bacc7ed08cc78 — Filesystem access.

repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:180

			fs.writeFileSync(filePath, "World")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #063a53f2d4198977 — Filesystem access.

repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:189

			expect(fs.readFileSync(filePath, "utf-8")).toBe("Hello World")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #68a0bc616f118a17 — Filesystem access.

repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:194

			fs.writeFileSync(filePath, "Hello World")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a3c46ce49a663091 — Filesystem access.

repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:203

			expect(fs.readFileSync(filePath, "utf-8")).toBe("Hello")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #948a3f6b21e20d1a — Filesystem access.

repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:216

			expect(fs.readFileSync(filePath, "utf-8")).toBe("New content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c8aead1d67eed20b — Filesystem access.

repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:221

			fs.writeFileSync(filePath, "Original")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a41139ecd4e6e60b — Filesystem access.

repo/packages/vscode-shim/src/__tests__/WorkspaceConfiguration.test.ts:1

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7a8a9970a0ae9495 — Environment-variable access.

repo/packages/vscode-shim/src/__tests__/logger.test.ts:13

		originalEnv = process.env.DEBUG

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9c64478f1cba844b — Environment-variable access.

repo/packages/vscode-shim/src/__tests__/logger.test.ts:23

		process.env.DEBUG = originalEnv

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #082566e4d38b614f — Environment-variable access.

repo/packages/vscode-shim/src/__tests__/logger.test.ts:94

				delete process.env.DEBUG

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a457729a989b4020 — Environment-variable access.

repo/packages/vscode-shim/src/__tests__/logger.test.ts:102

				process.env.DEBUG = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b9ddeba1d6a026e1 — Environment-variable access.

repo/packages/vscode-shim/src/__tests__/logger.test.ts:111

				process.env.DEBUG = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9c2ea57ff58bb516 — Filesystem access.

repo/packages/vscode-shim/src/__tests__/machine-id.test.ts:1

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0784878848f484f5 — Environment-variable access.

repo/packages/vscode-shim/src/__tests__/machine-id.test.ts:12

		originalHome = process.env.HOME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4b2390fad752fec7 — Environment-variable access.

repo/packages/vscode-shim/src/__tests__/machine-id.test.ts:14

		process.env.HOME = tempDir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3f4eedbeb3b508ef — Environment-variable access.

repo/packages/vscode-shim/src/__tests__/machine-id.test.ts:18

		process.env.HOME = originalHome

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #746feaab3f5a800f — Filesystem access.

repo/packages/vscode-shim/src/__tests__/machine-id.test.ts:46

		const storedId = fs.readFileSync(idPath, "utf-8").trim()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a84696823b07b154 — Filesystem access.

repo/packages/vscode-shim/src/__tests__/machine-id.test.ts:62

		fs.writeFileSync(idPath, "existing-machine-id-12345")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #793e87090df7898b — Environment-variable access.

repo/packages/vscode-shim/src/__tests__/machine-id.test.ts:81

		delete process.env.HOME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6d832b82bb3c8e5d — Environment-variable access.

repo/packages/vscode-shim/src/__tests__/machine-id.test.ts:82

		process.env.USERPROFILE = tempDir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d6850eec5b62c312 — Environment-variable access.

repo/packages/vscode-shim/src/__tests__/machine-id.test.ts:90

		process.env.HOME = tempDir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7fbcf93edd389a54 — Filesystem access.

repo/packages/vscode-shim/src/__tests__/paths.test.ts:1

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c2defa8c81fddb49 — Environment-variable access.

repo/packages/vscode-shim/src/__tests__/paths.test.ts:12

		originalHome = process.env.HOME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #86dc74c4988ccf18 — Environment-variable access.

repo/packages/vscode-shim/src/__tests__/paths.test.ts:14

		process.env.HOME = tempDir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fce7ca1c91a9059f — Environment-variable access.

repo/packages/vscode-shim/src/__tests__/paths.test.ts:18

		process.env.HOME = originalHome

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #48cb36ef741c6e8e — Environment-variable access.

repo/packages/vscode-shim/src/__tests__/paths.test.ts:197

			delete process.env.HOME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4085636d872dcfdd — Environment-variable access.

repo/packages/vscode-shim/src/__tests__/paths.test.ts:198

			process.env.USERPROFILE = tempDir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f92b5e2dd84a553f — Environment-variable access.

repo/packages/vscode-shim/src/__tests__/paths.test.ts:205

			process.env.HOME = tempDir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f75820a93477a118 — Filesystem access.

repo/packages/vscode-shim/src/__tests__/storage.test.ts:1

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9c8cffd8b6b957e1 — Filesystem access.

repo/packages/vscode-shim/src/api/FileSystemAPI.ts:5

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #776e9cfd70f04388 — Filesystem access.

repo/packages/vscode-shim/src/api/FileSystemAPI.ts:39

			const content = fs.readFileSync(uri.fsPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #05de7cb7a4cb014f — Filesystem access.

repo/packages/vscode-shim/src/api/FileSystemAPI.ts:56

			fs.writeFileSync(uri.fsPath, content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fd0bf73fecb29d34 — Filesystem access.

repo/packages/vscode-shim/src/api/WorkspaceAPI.ts:5

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #65d868e42eadebbb — Filesystem access.

repo/packages/vscode-shim/src/api/WorkspaceAPI.ts:131

			content = fs.readFileSync(uri.fsPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #12289ecdb6e34005 — Filesystem access.

repo/packages/vscode-shim/src/api/WorkspaceAPI.ts:215

					content = fs.readFileSync(filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #94a5c83c5d333728 — Filesystem access.

repo/packages/vscode-shim/src/api/WorkspaceAPI.ts:250

				fs.writeFileSync(filePath, newContent, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #30c931d0c45192bc — Environment-variable access.

repo/packages/vscode-shim/src/api/create-vscode-api-mock.ts:109

		shell: process.env.SHELL || "/bin/bash",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4ec36a7f4793c979 — Filesystem access.

repo/packages/vscode-shim/src/context/ExtensionContext.ts:2

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7ad56367677cc034 — Environment-variable access.

repo/packages/vscode-shim/src/context/ExtensionContext.ts:83

			options.storageDir || path.join(process.env.HOME || process.env.USERPROFILE || ".", ".vscode-mock")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a76f4e6cd064780d — Filesystem access.

repo/packages/vscode-shim/src/context/ExtensionContext.ts:125

				const packageJSON = JSON.parse(fs.readFileSync(packageJsonPath, "utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7c39e2bd2419b5eb — Filesystem access.

repo/packages/vscode-shim/src/storage/Memento.ts:1

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0c668619a06543d6 — Filesystem access.

repo/packages/vscode-shim/src/storage/Memento.ts:46

				const content = fs.readFileSync(this.filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b829f45a456ec20c — Filesystem access.

repo/packages/vscode-shim/src/storage/Memento.ts:63

			fs.writeFileSync(this.filePath, JSON.stringify(this.data, null, 2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3ca92a44eeeaf067 — Filesystem access.

repo/packages/vscode-shim/src/storage/SecretStorage.ts:1

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #19509644d7acd97a — Filesystem access.

repo/packages/vscode-shim/src/storage/SecretStorage.ts:57

				const content = fs.readFileSync(this.filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e749a349ca8715b8 — Filesystem access.

repo/packages/vscode-shim/src/storage/SecretStorage.ts:76

			fs.writeFileSync(this.filePath, JSON.stringify(this.secrets, null, 2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7c05eab5234a7c53 — Environment-variable access.

repo/packages/vscode-shim/src/utils/logger.ts:27

		if (process.env.DEBUG) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e73da158de1d1545 — Filesystem access.

repo/packages/vscode-shim/src/utils/machine-id.ts:6

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c63eb87505d555dc — Environment-variable access.

repo/packages/vscode-shim/src/utils/machine-id.ts:17

	const homeDir = process.env.HOME || process.env.USERPROFILE || "."

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #783074c6e07ca8a7 — Filesystem access.

repo/packages/vscode-shim/src/utils/machine-id.ts:23

			return fs.readFileSync(idPath, "utf-8").trim()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #320bb81bc23e7b4a — Filesystem access.

repo/packages/vscode-shim/src/utils/machine-id.ts:38

		fs.writeFileSync(idPath, machineId)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #44e53688e55b8b2a — Filesystem access.

repo/packages/vscode-shim/src/utils/paths.ts:5

import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #da8d60573bdf654e — Environment-variable access.

repo/packages/vscode-shim/src/utils/paths.ts:14

	const homeDir = process.env.HOME || process.env.USERPROFILE || "."

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): webview-ui

npm first-party

expand_more 22 low-confidence finding(s)

low env_fs production #40b422693dcdca37 — Environment-variable access.

repo/webview-ui/src/App.tsx:150

		if (process.env.NODE_ENV === "production") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d1c5942fafbf96fb — Environment-variable access.

repo/webview-ui/src/components/ErrorBoundary.tsx:56

		const version = process.env.PKG_VERSION || "unknown"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #44e2cdffa10b5eab — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/webview-ui/src/components/ui/hooks/useOpenRouterKeyInfo.ts:31

		const response = await axios.get(keyEndpoint, {
			headers: {
				Authorization: `Bearer ${apiKey}`,
			},
		})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #39db9248d3b54a96 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/webview-ui/src/components/ui/hooks/useOpenRouterModelProviders.ts:51

		const response = await axios.get(`${apiBaseUrl}/models/${modelId}/endpoints`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #0b61b398fd904ef3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/webview-ui/src/components/ui/hooks/useRequestyKeyInfo.ts:25

		const response = await axios.get(apiKeyUrl.toString(), {
			headers: {
				Authorization: `Bearer ${apiKey}`,
				"Content-Type": "application/json",
			},
		})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #2a1fa91d2b3e58eb — Environment-variable access.

repo/webview-ui/src/utils/sourceMapInitializer.ts:17

	if (process.env.NODE_ENV !== "production") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #b4909ac2d245b8cd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/webview-ui/src/utils/sourceMapInitializer.ts:82

				fetch(script.src)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #49fe950d151d32e3 — Environment-variable access.

repo/webview-ui/src/utils/sourceMapInitializer.ts:116

	if (process.env.NODE_ENV !== "production") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #0e0000d9356dc6c1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/webview-ui/src/utils/sourceMapInitializer.ts:159

				const response = await fetch(`${scriptUrl}.map`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #b19b32d57653cc89 — Filesystem access.

repo/webview-ui/src/vite-plugins/sourcemapPlugin.ts:2

import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #16210a6c9a473a12 — Environment-variable access.

repo/webview-ui/src/vite-plugins/sourcemapPlugin.ts:21

				const mode = process.env.NODE_ENV

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #23de7ed520c09a62 — Filesystem access.

repo/webview-ui/src/vite-plugins/sourcemapPlugin.ts:61

						let jsContent = fs.readFileSync(jsPath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b6283f5ca07cae8d — Filesystem access.

repo/webview-ui/src/vite-plugins/sourcemapPlugin.ts:71

							fs.writeFileSync(jsPath, jsContent)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #26e4d8ed63f44bec — Filesystem access.

repo/webview-ui/src/vite-plugins/sourcemapPlugin.ts:76

							const mapContent = JSON.parse(fs.readFileSync(mapPath, "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8661e85df10c5e39 — Filesystem access.

repo/webview-ui/src/vite-plugins/sourcemapPlugin.ts:92

							fs.writeFileSync(mapPath, JSON.stringify(mapContent, null, 2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #59ae3d2bb349e23e — Filesystem access.

repo/webview-ui/src/vite-plugins/sourcemapPlugin.ts:103

				fs.writeFileSync(
					path.join(outDir, "sourcemap-manifest.json"),
					JSON.stringify({
						enabled: true,
						version: process.env.PKG_VERSION || "unknown",
						buildTime: new Date().toISOString(),
					}),
				)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #98484c4d0589ac89 — Environment-variable access.

repo/webview-ui/src/vite-plugins/sourcemapPlugin.ts:107

						version: process.env.PKG_VERSION || "unknown",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ddb5f87295d6eda1 — Filesystem access.

repo/webview-ui/vite.config.ts:2

import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #aba8bdc96449dab0 — Filesystem access.

repo/webview-ui/vite.config.ts:45

				fs.writeFileSync(resolve(__dirname, "..", ".vite-port"), port.toString())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fcc1e4ad1c3a350d — Filesystem access.

repo/webview-ui/vite.config.ts:58

	const pkg = JSON.parse(fs.readFileSync(path.join(__dirname, "..", "src", "package.json"), "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fe4e81c992efc878 — Environment-variable access.

repo/webview-ui/vite.config.ts:63

		"process.env.VSCODE_TEXTMATE_DEBUG": JSON.stringify(process.env.VSCODE_TEXTMATE_DEBUG),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8e41f7c4085a73d0 — Filesystem access.

repo/webview-ui/vite.config.ts:76

			fs.readFileSync(path.join(__dirname, "..", "apps", "vscode-nightly", "package.nightly.json"), "utf8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

@google/genai

npm dependency

medium pii_flow dependency Excluded from app score #8b2ce630efaf2a63 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:27 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:27

    console.debug(text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #6fbb27d75cf6ac02 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:19 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:19

  console.log('text response: ', response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #42bee3b6d0accc8f — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:19 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:19

  console.log('text response: ', response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #fe01ebcf69e3f574 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:83 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:83

    console.log(`Uploaded file as: ${uploadedFile.name}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #d51d07dcf6b5e764 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:103 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:103

  console.log(`Creating batch embedding job with file: ${inputFile}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #fc0802495d3ae6dd — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:109 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:109

  console.log(`Created batch job: ${batchJob.name}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #7a917291450f020e — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:117 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:117

  console.log('result: ', result);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #fea0e67ff387ff5e — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:124 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:124

    console.log(
      `Batch job not done yet, current state: ${
        result.state
      }. Waiting 60 seconds...`,
    );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #61fc13c48b2c5381 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:133 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:133

  console.log(`Batch job finished with state: ${result.state}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #f8ee5045845ff239 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:161 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:161

    console.error('Batch job failed:', result.error);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #0a18196c85c884f4 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:163 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:163

    console.warn(`Batch job finished with unexpected state: ${result.state}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #2098cc7dff44985b — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:52 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:52

  console.log(`Created batch job: ${batchJob.name}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #02b9463cf6102596 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:66 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:66

    console.log(
      `Batch job not done yet, current state: ${
        result.state
      }. Waiting 10 seconds...`,
    );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #8573fed857115a5b — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:76 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:76

  console.log(`Batch job finished with state: ${result.state}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #88808d6e10209f3a — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:80 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:80

    console.log(result.dest?.inlinedEmbedContentResponses);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #b5a0829dd55417ce — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:82 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:82

    console.error('Batch job failed:', result.error);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #dc1f9c238fb76d06 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:84 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:84

    console.warn(`Batch job finished with state: ${result.state}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #be240b52a7d5f42c — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:307 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:296 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:307

          headers: {
            'x-goog-api-key': apiKey,
            'content-type': 'application/json',
          },

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

medium pii_flow dependency Excluded from app score #1be2fe9fafec33db — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:76 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:15 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:76

      console.log(chunk.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #30b2e29cf7a5e6ae — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:84 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:15 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:84

      console.log(chunk.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #3eb361e60b441e8c — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:87 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:15 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:87

  console.log('History: ', JSON.stringify(chat.getHistory(), null, 2));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #50a6f121f23dae6b — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:19 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:19

  console.debug('chat response 1: ', response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #b52db29992d079ce — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:21 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:21

  console.debug('chat response 2: ', response2.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #06324c532989e838 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:25 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:25

    console.debug('chat history: ', JSON.stringify(content, null, 2));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #653d3d94f7b1d2ee — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:36 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:36

    console.debug('chat response 1 chunk: ', chunk.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #72744228f66448ca — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:42 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:42

    console.debug('chat response 2 chunk: ', chunk.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #0fb2a8004678bbb1 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:46 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:46

    console.debug('chat history: ', JSON.stringify(content, null, 2));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #426c0eb53b0fe2c5 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:21 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:21

  console.debug(JSON.stringify(response));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #87d4510cb4c5e4bd — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/direct_url.ts:23 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/direct_url.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/direct_url.ts:23

  console.log(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #32f4247d6039959c — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:21 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:21

  console.debug(JSON.stringify(response));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #0f4e8c1948fe91eb — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:25 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:25

    console.log('list file search store: ', fileSearchStore);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #d9dc3c1e52dce114 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:34 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:34

  console.log('get file search store: ', fileSearchStore);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #f67d72a282f57097 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:40 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:40

  console.log('create file search store: ', fileSearchStore);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #b155012d950cdcf9 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:47 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:47

  console.log('uploaded file: ', file.name);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #8a06be7a75c94b5d — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:59 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:59

    console.log('operation: ', op);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #f37834eefda90b9c — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:76 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:76

    console.log('operation: ', op);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #0fa51f18f356846f — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:96 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:96

  console.log('text response: ', response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #583bbd37b3f01501 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:97 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:97

  console.log(
    'grounding metadata: ',
    JSON.stringify(response.candidates?.[0]?.groundingMetadata, null, 2),
  );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #f8f94584beaaad51 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:118 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:118

    console.log('list documents: ', document);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #c932d84bf6c51810 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:131 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:131

  console.log('get document: ', document);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #613767eeb4cc3115 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:80 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:16 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:80

      console.log(chunk.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #32b817c0274e7645 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:31 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:9 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:31

      console.debug(text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #a7f168cae33211ae — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:25 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:25

  console.debug(response.executableCode);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #40582a26c63a02e9 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:26 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:26

  console.debug(response.codeExecutionResult);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #6d74103bfeb164b7 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:32 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:32

    console.log(`current file status: ${getFile.state}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #9e05b6057a58b17c — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:58 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:58

  console.debug(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #2260a7e03de59c2b — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:55 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:13 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:55

  console.debug(response.functionCalls);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #ccf84a9cb2f351b4 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:52 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:10 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:52

  console.debug(response.functionCalls);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #9ceb06c3671a9d1d — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:29 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:29

  console.debug(response!.candidates![0]!.content);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #4edbf48297561f26 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:24 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:24

  console.debug(JSON.stringify(response));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #4043f64c2c35af68 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:27 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:27

  console.debug(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #93de332ab16e4180 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:38 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:38

  console.debug(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #32f76855e1278b07 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:42 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:9 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:42

  console.debug(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #e5eb01e2fce31a41 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:36 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:13 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:36

  console.debug(JSON.stringify(response?.candidates?.[0]?.safetyRatings));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #ea775269fdc8f56e — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:23 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:23

  console.debug(JSON.stringify(response?.candidates?.[0]?.groundingMetadata));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #878f9319968bd7f1 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:20 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:20

  console.debug(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #440f029687c14020 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:19 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:19

  console.debug(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #f7c362699e888015 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text_vertex_apikey.ts:20 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text_vertex_apikey.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text_vertex_apikey.ts:20

  console.debug(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #290e335b9a8790af — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:24 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:24

  console.debug(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #3fa59c0ce2862d78 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:26 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:26

    console.debug(response.candidates[0].urlContextMetadata);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #4561c4bc09bcc0ff — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:24 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:24

  console.debug(response?.generatedImages?.[0]?.image?.imageBytes);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #8dfc974d230eac8e — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:36 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:36

    console.log(
      `No videos generated due to: ${JSON.stringify(
        operation.response?.raiMediaFilteredReasons,
        null,
        2,
      )}`,
    );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #b3e37a982d37e5bc — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_basic.ts:19 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_basic.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_basic.ts:19

  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #c7d54eb5a68b2aab — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:70 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:70

      console.log(
        `Function call: ${step.name} with arguments ${JSON.stringify(
          step.arguments,
        )}`,
      );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #d7a98f88f896c016 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:92 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:92

      console.log(`Final response: ${response2}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #94fb8df8257712d7 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:94 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:94

      console.log(`Output: ${step}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #a7f9dbe5669c88e2 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:56 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:56

      console.log(
        `Function call: ${step.name} with arguments ${JSON.stringify(
          step.arguments,
        )}`,
      );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #f30e6893586166ef — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:79 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:79

      console.log(`Final response: ${response2}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #d8378bb63c105da3 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:81 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:81

      console.log(`Output: ${step}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #572015d59a25c289 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_get.ts:19 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_get.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_get.ts:19

  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #7314f1d1f94daed1 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_get.ts:22 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_get.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_get.ts:22

  console.debug(getResponse);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #02a3a68cdfe33437 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio.ts:38 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio.ts:38

  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #d565ef7efe740b5a — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:42 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:42

  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #1bdbe693802b68a8 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:66 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:66

  console.debug(generateContentResponse.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #5d8608c53552b931 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image.ts:38 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image.ts:38

  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #ca8296a4d706e288 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:41 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:41

  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #e142bb3e2b05d26f — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:64 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:64

  console.debug(generateContentResponse.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #2fb34eeb37c6fc33 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio_with_generate_content.ts:55 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio_with_generate_content.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio_with_generate_content.ts:55

  console.debug(
    'Generate Content response text: ',
    generateContentResponse.text,
  );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #8eaa430155ef879a — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio_with_generate_content.ts:59 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio_with_generate_content.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio_with_generate_content.ts:59

  console.debug(
    'Generate Content response data: ',
    generateContentResponse.data,
  );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #bc7084a325c63375 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image_with_generate_content.ts:52 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image_with_generate_content.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image_with_generate_content.ts:52

  console.debug(
    'Generate Content response text: ',
    generateContentResponse.text,
  );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #b944c1816a240935 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image_with_generate_content.ts:56 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image_with_generate_content.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image_with_generate_content.ts:56

  console.debug(
    'Generate Content response data: ',
    generateContentResponse.data,
  );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #91ab0c13df65c432 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateful.ts:22 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateful.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateful.ts:22

  console.log('Model: ', response1);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #3b009b7e21d9e6e1 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateful.ts:31 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateful.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateful.ts:31

  console.log('Model: ', response2);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #9ad76d8f6ecb5d95 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateless.ts:34 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateless.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateless.ts:34

  console.log('Model: ', response1);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #e7b405fb5aebacd9 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateless.ts:54 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateless.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateless.ts:54

  console.log('Model: ', response2);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #2e3b1fceaf48bee1 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_structured_output_json.ts:22 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_structured_output_json.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_structured_output_json.ts:22

  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #ac269c8ff8e0635e — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_code_execution.ts:21 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_code_execution.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_code_execution.ts:21

  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #1873bca0a1d60cc6 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_computer_use.ts:22 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_computer_use.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_computer_use.ts:22

  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #7bb6eaed759c7a9e — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_functions.ts:52 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_functions.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_functions.ts:52

  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #2a88d95dd5391d1b — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_google_search.ts:21 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_google_search.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_google_search.ts:21

  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #ba0d5b14c6d9ea1c — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mcp_server.ts:29 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mcp_server.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mcp_server.ts:29

  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #d209331d3031eb0a — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mime_type.ts:49 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mime_type.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mime_type.ts:49

  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #7fc31287d4fcd9bd — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_url_context.ts:22 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_url_context.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_url_context.ts:22

  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #87ac9206aa75dfa3 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_with_config.ts:21 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_with_config.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_with_config.ts:21

  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #4f08fc8baa355571 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:184 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:13 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:184

    console.log('Token:', JSON.stringify(token));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #5b46add39d259c5e — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_ephemeral.ts:152 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/live_ephemeral.ts:13 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/live_ephemeral.ts:152

  console.log('Token:', JSON.stringify(token));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #76608fbf1fb52049 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/register_files.ts:37 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/register_files.ts:9 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/register_files.ts:37

  console.log('Registered file: ', file);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #232d7dee1d3d1066 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/register_files.ts:45 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/register_files.ts:9 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/register_files.ts:45

  console.log(result.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #4023de6e7fed886c — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:41 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:41

  console.log(`Trigger created successfully! ID: ${triggerId}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #8e6778728f5690c1 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:44 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:44

  console.log('Getting trigger by ID:', triggerId);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #a2c061c44bade411 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:46 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:46

  console.log('Got trigger:', fetchedTrigger);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #067c2954db519ff8 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:52 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:52

    console.log('Trigger:', trigger);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #3ad27bc732f431b3 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:61 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:61

  console.log('Paused trigger status:', pausedTrigger.status);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #6a573f387648eeae — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:69 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:69

  console.log('Resumed trigger status:', resumedTrigger.status);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #a8cee4872a457210 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:76 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:76

  console.log('Trigger execution details:', executionResponse);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #e8aad9776e0be51b — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:80 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:80

  console.log('Listing executions for trigger:', triggerId);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #22582cda91e26366 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:85 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:85

  console.log('Trigger executions:', executions);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #2aab10544c1a3f36 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:89 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:89

  console.log('Deleting trigger:', triggerId);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

expand_more 368 low-confidence finding(s)

low env_fs tooling Excluded from app score unknown #b1ea6815a35f555b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/rollup.config.mjs:2

import {readFileSync} from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6ca32882645a1d18 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/rollup.config.mjs:6

  readFileSync(new URL('./package.json', import.meta.url), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f78e9901cb84f422 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/add_docsite_license_headers.ts:7

import * as fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #62f5b1d1cd16ab2a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/add_docsite_license_headers.ts:20

  const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7d4f4cec5c0d391d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/add_docsite_license_headers.ts:24

  fs.writeFileSync(filePath, header + content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9db0923a399015df — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generate_pages.ts:8

import * as fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #296ff1ade1e35edf — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generate_pages.ts:39

  const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d4c09fb5ba349cf6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generate_pages.ts:43

  fs.writeFileSync(filePath, HEADER + content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b1f568d43e637734 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generate_pages.ts:87

    const manifestContent = fs.readFileSync(manifestPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4c912352c1af1b86 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/ignore_missing_mcp_dep.js:7

import * as fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #447b7321865dedaa — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/ignore_missing_mcp_dep.js:64

    const fileContent = fs.readFileSync(absolutePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ad643f9d7cd46cf6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/ignore_missing_mcp_dep.js:74

      fs.writeFileSync(absolutePath, newContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e4f952878e5b94bc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/scripts/prepare.js:22

const isCI = process.env.CI === 'true' || process.env.KOKORO_JOB_TYPE !== undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f39ba4634087c4cf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1845e7a586f5efc3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d1cac0f5eb76896 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #444024b68ec8e653 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5609df88320ff69 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #162c40c6436ac6fb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ad62d26cd621b14d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e44109d8e7ae6902 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #093c7b8914714879 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d592d5ca311f216 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f3dd5374a4ecf5e0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7fca6844e21d3311 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc7da25ee2c2e874 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:10

import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3966a0b06635b06 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17

  apiKey: process.env.GEMINI_API_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1dca9e578f695954 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:28

  if (process.env.GOOGLE_GENAI_USE_VERTEXAI) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24f59405a4aacc1c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:71

    await fs.writeFile(tempFilePath, jsonlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43907a3dbb03dfc8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:148

      const contentString = await fs.readFile(tempFilePath, {encoding: 'utf8'});

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #783091a6f54646dd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14

  apiKey: process.env.GEMINI_API_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #74b65b65bef24f6a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:25

  if (process.env.GOOGLE_GENAI_USE_VERTEXAI) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e4d079ba7d46c70d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:18

const SKIP_HTTP = process.env.SKIP_HTTP === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #39b2974c021b8241 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:26

const MODE = (process.env.MODE || 'live') as 'live' | 'record' | 'mock';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1744e0fe64d5fef8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:35

  const mockedData = fs.readFileSync(MOCK_FILE);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f64232200f9ead6f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:92

                fs.writeFileSync(MOCK_FILE, Buffer.concat(buffers));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c89aebfb5b3d8fba — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:296

          process.env.GCLOUD_API_KEY ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #443c37124197dced — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:297

          process.env.GOOGLE_API_KEY ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b85b7ee84bcefc3a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:298

          process.env.GEMINI_API_KEY ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #35eedfd7555391fc — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:300

        const url = new URL(
          'https://generativelanguage.googleapis.com/v1beta/interactions',
        );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8b4d00549735b889 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:305

        const response = await fetch(url, {
          method: 'POST',
          headers: {
            'x-goog-api-key': apiKey,
            'content-type': 'application/json',
          },
          body: JSON.stringify(requestBody),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #d3514189c2748d1c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:380

  delete process.env.GOOGLE_GEMINI_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5b62f663bd9c9c4e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:382

    process.env.GCLOUD_API_KEY ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e571d94740988e6b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:383

    process.env.GOOGLE_API_KEY ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea8ab7ac1fe93907 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:384

    process.env.GEMINI_API_KEY ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8b96a36190a8fbc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/caches.ts:8

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3367f83dd6613fa0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/caches.ts:9

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25ff202ada2b957d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/caches.ts:10

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ebfa7a35f4d7117c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc.ts:12

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #761cbf1259ae1cdc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc.ts:13

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #979bceb4965e5f6b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc.ts:14

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #302e3f2803551585 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc.ts:15

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a2d2766e62d49cca — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:15

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d9cf582c16677fa — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:16

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40e131cdf6761081 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:17

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3dd2d5863f1143b9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:18

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #09601e06e396932f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming_function_call.ts:15

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6dd70a323af0e301 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming_function_call.ts:16

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #45d70556cf704a99 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming_function_call.ts:17

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b138c5a1ad6eb6f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b50ea3fac3a249a0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7564cb8804352612 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7706da200bbe3062 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7073b613ecb3aa96 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f5db1003cf7faa1b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #414bf34b99734772 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee0cf1e073dfab2e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6aabe325d3d35b49 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/direct_url.ts:8

const client = new GoogleGenAI({apiKey: process.env.GEMINI_API_KEY});

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d233e9dad865e13e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_content_reference.ts:12

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #447fb9e70eea38a0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_content_reference.ts:13

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e886e9204c53b679 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_content_reference.ts:14

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #13fd70bdd1d5f62b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_control_reference.ts:12

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc0da70af01b61da — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_control_reference.ts:13

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40f063fe62dd4f6d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_control_reference.ts:14

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6b98b656e497905 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_mask_reference.ts:13

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc41fc7dfdf5ceaf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_mask_reference.ts:14

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b66af909e7d58f0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_mask_reference.ts:15

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b0ffa45410ea843 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_style_transfer.ts:8

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3b4b5b4c193588c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_style_transfer.ts:9

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #81e8d256b83e2b50 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_style_transfer.ts:10

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #981092e93c3b09a2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_subject_reference.ts:12

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf83499f7e10be5b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_subject_reference.ts:13

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d666249051116a15 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_subject_reference.ts:14

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #05ec7601db2b4698 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #927abe74bc5427bc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5b72c553bbe63334 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #41dd4b8e716cff0c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a925810018a6a48f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea32e9f8ccc2fa99 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:16

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b66b702c52b128e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:17

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ab0efdd2e66d2cd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:18

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6240e4a04ed7651d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:19

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d61214869596261 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:7

import * as fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4593edd193a94c33 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:9

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34caa4d8deda2d1f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:10

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1efde5681f1f8aef — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:11

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9b5b9878010e104 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:12

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5bb0d91c6c6c2c90 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:35

      fs.writeFileSync(fileName, data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c1b3f5ccdf7a91a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:65

      fs.writeFileSync(fileName, data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9b0e3e72021848c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming_function_call.ts:12

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #879f3b76a8439223 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming_function_call.ts:13

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a598604abc77c24d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming_function_call.ts:14

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ce752b8e7104120f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2de5d3d9c7b52bf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fbecbb8049b8484e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2dcf64db28b0538f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1756aa8bec6f1dae — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7bd455b1df3ec0aa — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6116ce208edc9a49 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:13

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb793907f66a3b5b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:14

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f589a70d0aa24a04 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:15

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c1ca716907dad53 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:16

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d087bd89e1320d22 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:10

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #382f792d64f44788 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:11

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6042583fce07ed44 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:12

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c5ba752bc82a055 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:13

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b47afef4957dff4d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7616a76e4fd84495 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5648ac7d1604409e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a8eae0e9274ba76 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #54944bd8739efc5c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1eabdc78efa8bc21 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #315ba4fa7492f408 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a0d1c13806e88474 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8b08f9ef8ce8644 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0358b04d97fa8464 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1c865c20f416bd10 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb48ff793f996797 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #091f0a9227990e20 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:8

const GOOGLE_API_KEY = process.env.GOOGLE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7291f7f397152efb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40801c8ed2320481 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9b1ea04b58bc2a0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8718d8d5727627b7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:9

const GOOGLE_API_KEY = process.env.GOOGLE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9a2161b933248ca — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:10

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3428c3cb8b9491a2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:11

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e52f6ba49cf9a672 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:12

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76f4c80751b13100 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:13

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a9f85b98553db72 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:14

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b159e93e31a1b6fd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:15

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2037028abf728b0b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:16

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c37298b6575d4be1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2bf0bd9a2f0bb3ae — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bffb594001c1a76e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84e3709da9cfcb2b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2113ede5f220afd7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b01eec520eda11da — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #54e9559edaf1bd8e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7a5c25d60f52d426 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e3419bd59c5b9623 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb028e3b84da8175 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3789d3d0fb83f151 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #929177f6b62870b1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #115e066d28c90b2a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text_vertex_apikey.ts:8

const GOOGLE_API_KEY = process.env.GOOGLE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a1b86c7e2df4daf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text_vertex_apikey.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab281840ff13ae57 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ab97bc5deaac39f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #57f104ce93d23abf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #901370e974ab5446 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da9f1f0d882f0f9e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b611faf4de8541c8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #883ffdccef80b6e5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4dc074346cebc992 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0bd519b8f7db2ff3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0712a43034bfb269 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #99b1dbe36d4ca72e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_edit_outpaint.ts:8

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e30c91e64e81854 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_edit_outpaint.ts:9

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #332d5da8bdb60378 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_edit_outpaint.ts:10

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd956c603a5c59e7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_extension.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #55f1c521574cf22a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_extension.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5bdd18658da07b85 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_extension.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a5a7c0c5913d943 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_extension.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3349398974f6ac04 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #005381ae8cab15f5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #de39cd4f4bff78e2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f2cecfbcb08fd978 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2a4450cdfbbdcdf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/get_model_info.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8dc5008ea50569a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/get_model_info.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b4448049e229d83 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/get_model_info.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80c2816e03bfcda2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/get_model_info.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f9d6db089e2e4a7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_basic.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #35f856ba3efeead6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_basic.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ce622b8c60d8b989 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d6fdcf221d3cde69 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a57b754cf5eb38c9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0fd80475999ab29c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #93c4626c450bd7e5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_get.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dfef72d2cdeda534 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_get.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab6467a690d3a94a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ce27a903ea056a1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #1e9a04bad2d4d1b4 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio.ts:19

  const audioResponse = await fetch(audioUrl);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #b75d5af7303172e1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6fbf594d1d13a12d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #5d89ff5bb176c251 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:19

  const audioResponse = await fetch(audioUrl);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #af36624a5fcac87e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49c81fb27032856a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #f6d5329775eb468f — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image.ts:19

  const imageResponse = await fetch(imageUrl);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #cd2a9748f050321f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f937fd89a4f465b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #9ee5df3e5bbba533 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:23

  const imageResponse = await fetch(imageUrl);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #d2907f36a2dcaccd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e1308cd1150320c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #640ce52de2a486e2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio_with_generate_content.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e98e685f1119e7e7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio_with_generate_content.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #28547f47c17a70a8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #71281ed2923a3747 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #81cf03bdb790e5db — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image_with_generate_content.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #91d287ae431398d5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image_with_generate_content.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43eb2afe6e27b433 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateful.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #18763999c8b130c3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateful.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dcfc543d5dfca8ae — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateless.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #07b284616eacdd8c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateless.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0d144e4202357a6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_streaming.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a00a38dcdc948eb1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_streaming.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b49f5cc6fd6e12f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_structured_output_json.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76c2f789d5bec73a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_structured_output_json.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f145f173d7184b83 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_code_execution.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a0ffce7f5ef77865 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_code_execution.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #acacb9ae9e464c15 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_computer_use.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a408f651c29d5b47 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_computer_use.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #42f7c87a943c1919 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_functions.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6a556753805c5cb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_functions.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58a76224857af0c2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_google_search.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5edd1bb154f8e3b1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_google_search.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #81978d607100ee98 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mcp_server.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0afef1bc67760c45 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mcp_server.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c1cc8f322e9a9584 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mime_type.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #12d624cce1af3365 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mime_type.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a1b804b87e565e8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_url_context.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c75137e35bd6dd8a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_url_context.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #acca753cd741df9d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_with_config.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #531b872a4208d4b0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_with_config.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97282645f6939d31 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/list_models.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #acc7d2e66390ea01 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/list_models.ts:9

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #35a5924b0236c20f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/list_models.ts:10

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #deff497adbfe891c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/list_models.ts:11

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #18d5e324e7772e42 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:13

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a69056f91f697825 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:14

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ef644d6e1172131 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:15

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba4955e13422f2bf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:16

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f479dea2b9b8e60f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:18

  process.env.GOOGLE_GENAI_MLDEV_USE_EPHEMERAL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #45c19459cddd30c7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content_with_url_context.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #771fef88a5373a45 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content_with_url_context.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d20d0a43569124f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_ephemeral.ts:13

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e23eed61ac950aca — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_ephemeral.ts:14

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50afb6d8ffb88df6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_music.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #22eef209cc97122f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_music.ts:9

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4845e253dd31cb50 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_prompt.ts:9

import * as fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e32f8d7a79ce82cc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_prompt.ts:26

  const GOOGLE_API_KEY = process.env.GOOGLE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4aa97c5949f8ef5b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_prompt.ts:27

  const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e18d0efbd048a1a0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_prompt.ts:28

  const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ff8f8232e41a6a1a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_prompt.ts:29

  const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e293f310a3ef771c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_prompt.ts:55

    const voiceSampleAudio = fs.readFileSync(voiceSamplePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #100a475e8641cd5e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_prompt.ts:59

      consentAudio = fs.readFileSync(voiceConsentPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d1fcc53c3173cd4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_prompt.ts:166

  fs.writeFileSync(filename, fileBuffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6cc2b50a7200d12 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_server.ts:25

const GOOGLE_API_KEY = process.env.GOOGLE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #979d7278c22aafd4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_server.ts:26

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd260862ec8b48d3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_server.ts:27

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7cc720775450158d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/live_server.ts:28

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f12598683bb670de — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/mcp_client.ts:12

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10bc4172ad9c35b4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/mcp_client.ts:13

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #501d0e6e701d3ece — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/mcp_client.ts:14

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eabc1307f6888fad — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/mcp_client.ts:15

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #77c134964b683229 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/mcp_client_stream.ts:12

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #857783e735c53e7b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/mcp_client_stream.ts:13

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4bfdc45531f6bb36 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/mcp_client_stream.ts:14

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #816bd90e15721c2c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/mcp_client_stream.ts:15

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b9cf478f1e77151 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/recontext_image_virtual_try_on.ts:8

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67b71aebf2fb3851 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/recontext_image_virtual_try_on.ts:9

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0f6e88036c8ec8b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/recontext_image_virtual_try_on.ts:10

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8050b754744df99c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/register_files.ts:9

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #100606fcc63ebdbe — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/register_files.ts:10

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e130d3390f63581c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/segment_image.ts:8

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #00fbccd248a2cdc9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/segment_image.ts:9

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e05114fca47a35dd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/segment_image.ts:10

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46b1ae67c02bcc92 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8

const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5786c4cdbd829bf5 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/tunings.ts:8

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fd32c3aa4f4c1552 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/tunings.ts:9

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d42803daea811a1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/tunings.ts:10

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #55cf986668544351 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/upscale_image.ts:8

const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fde86cae387e7e15 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/upscale_image.ts:9

const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0a474d381061f7a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/sdk-samples/upscale_image.ts:10

const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #0706209f438a5dcd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/_api_client.ts:731

      return fetch(url, requestInit);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #669c0b1fa8b56acd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/_api_client.ts:736

      const response = await fetch(url, requestInit);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #90a808c2750c0570 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/batches.ts:240

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f7d8cc401e545ee7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/batches.ts:271

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #10881f510f1003dd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/batches.ts:323

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b5fd77d29cb89968 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/batches.ts:373

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #85c8e8ce31457304 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/batches.ts:404

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #12b06b145afa3e47 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/batches.ts:452

      await this.apiClient.request({
        path: path,
        queryParams: queryParams,
        body: JSON.stringify(body),
        httpMethod: 'POST',
        httpOptions: params.config?.httpOptions,
        abortSignal: params.config?.abortSignal,
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f5794e4f12e28e51 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/batches.ts:473

      await this.apiClient.request({
        path: path,
        queryParams: queryParams,
        body: JSON.stringify(body),
        httpMethod: 'POST',
        httpOptions: params.config?.httpOptions,
        abortSignal: params.config?.abortSignal,
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #25f9352c64cba131 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/batches.ts:501

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #238caafb798d2c89 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/batches.ts:536

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6aa01dedfbf3c28b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/batches.ts:595

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'DELETE',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #731335db69135acc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/batches.ts:632

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'DELETE',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bc46a5585c7d84bf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/caches.ts:92

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7d02c61b8e5a7225 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/caches.ts:121

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3084fed8cadbc2b2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/caches.ts:171

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #88eeb283dcef3959 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/caches.ts:200

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #22d01023e8ba2ae0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/caches.ts:250

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'DELETE',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e01f96e64a55a5aa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/caches.ts:289

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'DELETE',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1a42080b3e91c060 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/caches.ts:352

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'PATCH',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8d667372e1fe06a0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/caches.ts:381

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'PATCH',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #249beb28914bbba9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/caches.ts:417

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #754b32f457d86f43 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/caches.ts:453

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b980204ddf6153e1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/cross/_cross_uploader.ts:149

      response = await apiClient.request({
        path: '',
        body: chunk,
        httpMethod: 'POST',
        httpOptions: {
          ...httpOptions,
          apiVersion: '',
          baseUrl: finalUrl,
          headers: mergedHeaders,
        },
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #498d9447536e5e0b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/documents.ts:74

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #24b77ef207a2a221 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/documents.ts:116

      await this.apiClient.request({
        path: path,
        queryParams: queryParams,
        body: JSON.stringify(body),
        httpMethod: 'DELETE',
        httpOptions: params.config?.httpOptions,
        abortSignal: params.config?.abortSignal,
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4c46665218335ab2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/documents.ts:148

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f25b558c98dd1a83 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/files.ts:159

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #62a559c4f3f96d49 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/files.ts:208

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4a46775aed6c68e7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/files.ts:264

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7af383637d46abe5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/files.ts:317

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'DELETE',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0287b15caedf96f4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/files.ts:366

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cef3df170d39869f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/filesearchstores.ts:143

    const response = await this.apiClient.request({
      path: pathname,
      httpMethod: 'GET',
      queryParams: queryParams,
      httpOptions: httpOptions,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #95115ea0d77b5a47 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/filesearchstores.ts:189

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #65115b597379820f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/filesearchstores.ts:236

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4e8ba98f9af5a643 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/filesearchstores.ts:278

      await this.apiClient.request({
        path: path,
        queryParams: queryParams,
        body: JSON.stringify(body),
        httpMethod: 'DELETE',
        httpOptions: params.config?.httpOptions,
        abortSignal: params.config?.abortSignal,
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d2557488ae5b3335 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/filesearchstores.ts:310

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7ff183d966406583 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/filesearchstores.ts:354

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #955dcbe80cc11590 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/filesearchstores.ts:409

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f5dae2f264977256 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/gaos/lib/http.ts:26

    return fetch(input);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #830e9d70ef68fae1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/gaos/lib/http.ts:28

    return fetch(input, init);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #89710ce2ce4a6c66 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/gaos/lib/sdks.ts:357

        let response = await this._httpClient.request(req);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #609d7973fd2aa08b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:704

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e4a2c41388ff5eca — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:746

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #575db12379eebb3e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:916

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #dd6cf1652a7a65c5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:958

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4d85971748a11712 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1013

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9baddfb35bd08c4b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1055

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #46810777b1a3ecc2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1110

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5dfc69c69dee620b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1169

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f7a1ecacd716c9fa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1249

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #970de06e686e7b22 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1319

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7cc375ce61622a39 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1375

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e35b8b0beb211989 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1407

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ecf2aeacfbab9a85 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1449

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #40445b29d9505891 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1491

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #64898aa82309c82a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1558

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'PATCH',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b5dcac5eab031a62 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1590

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'PATCH',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #85b118cab74864f4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1643

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'DELETE',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8c2e57a3057a8d52 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1685

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'DELETE',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2696274f45586577 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1753

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a10e9dac613efbdc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1795

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ddc2b2f0319a67a8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1865

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ffdcb3828d19d638 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1924

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e84c997884eacbfd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/models.ts:1960

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #252e94a4c27a5ded — Filesystem access.

pkgs/npm/@[email protected]__reposrc/src/node/_node_downloader.ts:7

import {createWriteStream} from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67a4b2c09cced8bc — Filesystem access.

pkgs/npm/@[email protected]__reposrc/src/node/_node_downloader.ts:8

import {writeFile} from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a57f57b5407c3f2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/src/node/_node_downloader.ts:39

          await writeFile(params.downloadPath, response as string, {
            encoding: 'base64',
          });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #801f43883cdd6d92 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/node/_node_downloader.ts:58

    return await apiClient.request({
      path: `files/${name}:download`,
      httpMethod: 'GET',
      queryParams: {
        'alt': 'media',
      },
      httpOptions: params.config?.httpOptions,
      abortSignal: params.config?.abortSignal,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #a3059d1775648167 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/src/node/_node_tokenizer_platform.ts:8

import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #885f40a6b76e7469 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/src/node/_node_tokenizer_platform.ts:34

      const data = await fs.readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a456a11504a7aba — Filesystem access.

pkgs/npm/@[email protected]__reposrc/src/node/_node_tokenizer_platform.ts:55

      await fs.writeFile(tmpPath, data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #89a515ef4f585691 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/node/_node_tokenizer_platform.ts:78

    const response = await fetch(url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #5180d6237bc3d257 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/src/node/_node_uploader.ts:6

import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #dd0d61ba70a3dcce — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/node/_node_uploader.ts:290

          response = await apiClient.request({
            path: '',
            body: chunk,
            httpMethod: 'POST',
            httpOptions: {
              ...httpOptions,
              apiVersion: '',
              baseUrl: finalUrl,
              headers: mergedHeaders,
            },
          });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5c32b7dbd9206c68 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/operations.ts:132

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #290b371e9f3f2ce7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/operations.ts:156

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6e3f816336551151 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/operations.ts:190

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bf8c5e0ea288ed5a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/tokens.ts:286

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(transformedBody),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5c15838964772fec — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/tunings.ts:136

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3ec94e9de2781516 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/tunings.ts:170

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #89b54ef5a4b43ed9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/tunings.ts:214

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7771ca4d6ae8c2ae — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/tunings.ts:277

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #94f2d89596094346 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/tunings.ts:315

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #46bb74f2e3751e28 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/tunings.ts:366

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0a8823266a916420 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/tunings.ts:421

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cf5338fa00a16e8f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/tunings.ts:465

      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@mistralai/mistralai

npm dependency

medium pii_flow tooling Excluded from app score unknown #593a1d19ad733b53 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:30 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:30

console.log(`Created job with ID: ${job.id}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #823ad99bc7e8bd2b — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:42 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:42

  console.log(`Job status: ${job.status}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #919475807bb9b110 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:45 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:45

console.log(`Job is done, status ${job.status}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #ceceadcc2c081fed — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:51 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:51

      console.log(response.body);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #06c2cc74eacf9ec4 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:53 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:53

      console.log(output);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #14c13114444ab5f0 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:59 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:59

  console.log(`Error file ID: ${job.errorFile}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #2f77b7a4882d3de7 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_chat_no_streaming.ts:15 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_chat_no_streaming.ts:3 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_chat_no_streaming.ts:15

console.log("Chat:", chatResponse);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #379035579c7d9008 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_chat_prediction.ts:33 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_chat_prediction.ts:3 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_chat_prediction.ts:33

console.log(chatResponse.choices[0]?.message.content);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #1d1fdc3925f8c051 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_chat_with_image_no_streaming.ts:27 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_chat_with_image_no_streaming.ts:3 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_chat_with_image_no_streaming.ts:27

console.log("JSON:", chatResponse.choices[0].message.content);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #213d0d58a08e8829 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_embeddings.ts:20 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_embeddings.ts:3 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_embeddings.ts:20

console.log("Embeddings Batch:", embeddingsBatchResponse.data);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #8da663174dbc339a — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_files.ts:24 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_files.ts:6 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_files.ts:24

console.log(createdFile);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #49469f7e98d2cf14 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_files.ts:28 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_files.ts:6 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_files.ts:28

console.log(files);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #d5ca413966d8cba6 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_files.ts:32 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_files.ts:6 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_files.ts:32

console.log(retrievedFile);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #ca6204425292c06b — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_files.ts:36 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_files.ts:6 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_files.ts:36

console.log(deletedFile);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #438b6c21a08e3c37 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:127 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:4 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:127

  console.log(`calling functionName: ${functionName}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #af627dccedb79347 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:128 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:4 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:128

  console.log(`functionParams: ${toolCall.function.arguments}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #5ff13af59663014a — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:147 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:4 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:147

console.log(response.choices[0].message.content);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #80fa1168697784e4 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_function_calling_streaming.ts:150 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_function_calling_streaming.ts:3 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_function_calling_streaming.ts:150

  console.log(`calling functionName: ${functionName}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #7b1502a84d8c8983 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_function_calling_streaming.ts:151 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_function_calling_streaming.ts:3 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_function_calling_streaming.ts:151

  console.log(`functionParams: ${toolCall.function.arguments}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #20931294d95b470f — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_json_format.ts:16 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_json_format.ts:3 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_json_format.ts:16

console.log("Chat:", chatResponse.choices[0].message.content);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #3cf74e6bbd40e3b4 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_file.ts:33 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_file.ts:6 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_file.ts:33

console.log("OCR ", ocrResponse);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #3c353d05adf28584 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_url.ts:15 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_url.ts:3 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_url.ts:15

console.log("OCR:", ocrResponse);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #40efe9dbbcdb631e — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_structured_outputs.ts:52 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_structured_outputs.ts:4 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_structured_outputs.ts:52

console.log("\n", parsedAccumulatedStream);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #3550feeb4a9ca423 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/async_structured_outputs.ts:70 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_structured_outputs.ts:4 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/async_structured_outputs.ts:70

console.log("\n", chatResponse.choices[0].message.parsed);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #151e0825abb59cb5 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/azure/async_chat_no_streaming.ts:27 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/azure/async_chat_no_streaming.ts:3 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/azure/async_chat_no_streaming.ts:27

console.log("Success", chatResult);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #cfa4f1c706b5caf5 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/prompt_lifecycle.ts:23 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/prompt_lifecycle.ts:3 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/prompt_lifecycle.ts:23

console.log(`created prompt ${promptId} (v${prompt.version})`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #40ffa3d23a285f73 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/prompt_lifecycle.ts:38 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/prompt_lifecycle.ts:3 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/prompt_lifecycle.ts:38

console.log(`production -> v${live.version}: ${live.definition?.content}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #5650f7ec68de1f8d — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/realtime_microphone.ts:153 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/realtime_microphone.ts:107 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/realtime_microphone.ts:153

        console.error(`\nTranscription error: ${errorMessage}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #bd48ad1853bb5f48 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/realtime_transcription.ts:213 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/realtime_transcription.ts:162 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/realtime_transcription.ts:213

        console.error(`Transcription error: ${errorMessage}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #0fc6cd5c95325275 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/reasoning.ts:35 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/reasoning.ts:3 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/reasoning.ts:35

  console.log(content);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #031069b45de99bb6 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/reasoning.ts:42 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/reasoning.ts:3 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/reasoning.ts:42

          console.log(inner.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #67617f8ba419a3a4 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/reasoning.ts:47 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/reasoning.ts:3 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/reasoning.ts:47

      console.log(chunk.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #d2a02f9771c050dc — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/reasoning_multi_turn.ts:61 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/reasoning_multi_turn.ts:14 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/reasoning_multi_turn.ts:61

  console.log(
    `turn ${i + 1}: prompt=${String(promptTokens).padStart(4)} ` +
      `completion=${String(completionTokens).padStart(4)}  -> ${finalText(message.content)}`,
  );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #8bc42677274ab978 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/reasoning_multi_turn.ts:74 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/reasoning_multi_turn.ts:14 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/reasoning_multi_turn.ts:74

console.log(
  `TOTAL: prompt=${totalPrompt} completion=${totalCompletion} ` +
    `(sum ${totalPrompt + totalCompletion})`,
);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #654484d704e2eed5 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/reasoning_response_shape.ts:30 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/reasoning_response_shape.ts:7 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/reasoning_response_shape.ts:30

  console.log(`typeof content = ${Array.isArray(content) ? "Array" : typeof content}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #286cb8ef470cb478 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/reasoning_response_shape.ts:32 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/reasoning_response_shape.ts:7 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/reasoning_response_shape.ts:32

  console.log(JSON.stringify(content, null, 2));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #acd70aa2f97ca535 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:30 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:3 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:30

console.log(
  `created skill ${skillId} (v${skill.version}), assets: ${Object.keys(
    skill.definition?.assets ?? {},
  )}`,
);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #a62c10fc391017c4 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:47 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:3 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:47

console.log(`published v${version.version}, moved 'main' to it`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #aad5769327d4ead6 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:50 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:3 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:50

console.log(
  `main -> v${runnable.version}: ${runnable.definition?.description}`,
);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #f82f5175c047fee8 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]/packages/mistralai-azure/examples/chatComplete.example.ts:35 · flow /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/packages/mistralai-azure/examples/chatComplete.example.ts:18 → /tmp/closeopen-_y1xule_/pkgs/npm/@[email protected]/packages/mistralai-azure/examples/chatComplete.example.ts:35

  console.log(result);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

expand_more 59 low-confidence finding(s)

low egress dependency Excluded from app score #882175c2ba3812a7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/esm/hooks/tracing.js:52

            return this.wrappedClient.request(request);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8976c74fe64f5921 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/esm/hooks/tracing.js:58

                return await this.wrappedClient.request(request);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #62ce55a68a780dac — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/esm/hooks/tracing.js:60

            return await observability.runWithContext(activeContext, () => this.wrappedClient.request(request));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f8f29e47af6d03a6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/esm/lib/http.js:11

        return fetch(input);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #278cb1eeadf1c3a5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/esm/lib/http.js:14

        return fetch(input, init);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a6c0efdc672d154f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/esm/lib/sdks.js:147

            let response = await this.#httpClient.request(req);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #2a663bc11f44d55c — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/async_audio_transcription_diarize.ts:3

const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #33b82a172df904b0 — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/async_audio_transcription_stream.ts:3

const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ea913325e2f24e83 — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3

const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a2f15c112ced6b4e — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/async_chat_no_streaming.ts:3

const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #026b67668151ecd7 — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/async_chat_prediction.ts:3

const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bf14acea7e3eac2c — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/async_chat_streaming.ts:3

const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ec02f58ed3694a97 — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/async_chat_with_image_no_streaming.ts:3

const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0dd52d1b81250eae — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/async_conversation_agent.ts:3

const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d85b716cda65e41a — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/async_embeddings.ts:3

const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #27a3940026ad4161 — Filesystem access.

pkgs/npm/@[email protected]/examples/src/async_files.ts:1

import * as fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f78b7da56c6e8f45 — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/async_files.ts:6

const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #291a97849a87eaac — Filesystem access.

pkgs/npm/@[email protected]/examples/src/async_files.ts:19

const blob = new Blob([fs.readFileSync(filePath)], {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9821e0ae4a703014 — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:4

const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e30339ca560b329d — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/async_function_calling_streaming.ts:3

const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0fe7a326d35ea969 — Filesystem access.

pkgs/npm/@[email protected]/examples/src/async_jobs.ts:1

import * as fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e6cddacd6b25a184 — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/async_jobs.ts:6

const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #29174b0ffb1e8b28 — Filesystem access.

pkgs/npm/@[email protected]/examples/src/async_jobs.ts:19

const blob = new Blob([fs.readFileSync(filePath)], {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d4d1a6535a13a986 — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/async_json_format.ts:3

const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4dee3dfc2104493a — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/async_list_models.ts:3

const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3f2b92379198d901 — Filesystem access.

pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_file.ts:2

import fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5ca423ac19381f05 — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_file.ts:6

const apiKey = process.env.MISTRAL_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #02042e351dcf7097 — Filesystem access.

pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_file.ts:16

const uploaded_file = fs.readFileSync(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #03dfe9aa7705fc26 — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_url.ts:3

const apiKey = process.env.MISTRAL_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ac084191d903b1ec — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/async_structured_outputs.ts:4

const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f14e8894c13c5951 — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/azure/async_chat_no_streaming.ts:3

const azureAPIKey = process.env["AZURE_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #30517650b26278e8 — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/azure/async_chat_no_streaming.ts:8

const azureEndpoint = process.env["AZURE_ENDPOINT"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #08b5cfc42ee4756d — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/error_handling.ts:4

const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2b1db835b1edbfae — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/gcp/async_chat_no_streaming.ts:3

const projectId = process.env["GOOGLE_PROJECT_ID"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #767894762ad345e2 — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/prompt_lifecycle.ts:3

const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #451f3561a3f77663 — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/realtime_microphone.ts:38

      default: process.env["MISTRAL_API_KEY"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e31a3e31b87d3065 — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/realtime_microphone.ts:43

      default: process.env["MISTRAL_BASE_URL"] ?? "wss://api.mistral.ai",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4595bd9d69d2ea8b — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/realtime_microphone.ts:107

  const apiKey = args.apiKey ?? process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f1b1df83533cb6f9 — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/realtime_transcription.ts:46

      default: process.env["MISTRAL_API_KEY"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d99d0e985da3c007 — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/realtime_transcription.ts:51

      default: process.env["MISTRAL_BASE_URL"] ?? "https://api.mistral.ai",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #53029cfb928d282f — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/realtime_transcription.ts:162

  const apiKey = args.apiKey ?? process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b2cb7f50a9f4fc4c — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/reasoning.ts:3

const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7cc514df259cecb7 — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/reasoning_multi_turn.ts:14

const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #40b86d02a17b404a — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/reasoning_response_shape.ts:7

const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3d9e246971ef85c1 — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/reasoning_with_streaming.ts:3

const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #064990c67aae9fea — Environment-variable access.

pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:3

const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d7d828c8ad527a28 — Environment-variable access.

pkgs/npm/@[email protected]/packages/mistralai-azure/examples/chatComplete.example.ts:18

  apiKey: process.env["MISTRAL_API_KEY"] ?? "",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #80cb256410be2f5e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/packages/mistralai-azure/src/lib/http.ts:19

    return fetch(input);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bea03c8550cdb660 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/packages/mistralai-azure/src/lib/http.ts:21

    return fetch(input, init);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2a30973ded926b49 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/packages/mistralai-azure/src/lib/sdks.ts:259

        let response = await this.#httpClient.request(req);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ad5a8ff1017e64d4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/packages/mistralai-gcp/src/lib/http.ts:19

    return fetch(input);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d3776d7a5b080083 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/packages/mistralai-gcp/src/lib/http.ts:21

    return fetch(input, init);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #08be4305f8cae095 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/packages/mistralai-gcp/src/lib/sdks.ts:255

        let response = await this.#httpClient.request(req);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0150421891b1cff1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/hooks/tracing.ts:82

      return this.wrappedClient.request(request);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #33a9e327060e689f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/hooks/tracing.ts:89

        return await this.wrappedClient.request(request);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #65e6b0490fca4c6c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/hooks/tracing.ts:94

        () => this.wrappedClient.request(request)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #db434fb53864a86f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/lib/http.ts:19

    return fetch(input);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #06313c9e0bb59f22 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/lib/http.ts:21

    return fetch(input, init);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4917ae3bf5383e46 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/lib/sdks.ts:259

        let response = await this.#httpClient.request(req);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

axios

npm dependency

medium pii_flow dependency Excluded from app score #92aaf3c960781b04 — Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.

pkgs/npm/[email protected]/lib/adapters/http.js:1062 · flow /tmp/closeopen-_y1xule_/pkgs/npm/[email protected]/lib/adapters/http.js:861 → /tmp/closeopen-_y1xule_/pkgs/npm/[email protected]/lib/adapters/http.js:1062

      req = transport.request(options, function handleResponse(res) {
        clearConnectPhaseTimer();

        if (req.destroyed) return;

        const streams = [res];

        const responseLength = utils.toFiniteNumber(res.headers['content-length']);

        if (onDownloadProgress || maxDownloadRate) {
          const transformStream = new AxiosTransformStream({
            maxRate: utils.toFiniteNumber(maxDownloadRate),
          });

          onDownloadProgress &&
            transformStream.on(
              'progress',
              flushOnFinish(
                transformStream,
                progressEventDecorator(
                  responseLength,
                  progressEventReducer(asyncDecorator(onDownloadProgress), true, 3)
                )
              )
            );

          streams.push(transformStream);
        }

        // decompress the response body transparently if required
        let responseStream = res;

        // return the last request in case of redirects
        const lastRequest = res.req || req;

        // if decompress disabled we should not decompress
        if (decompress !== false && res.headers['content-encoding']) {
          // if no content, but headers still say that it is encoded,
          // remove the header not confuse downstream operations
          if (method === 'HEAD' || res.statusCode === 204) {
            delete res.headers['content-encoding'];
          }

          switch ((res.headers['content-encoding'] || '').toLowerCase()) {
            /*eslint default-case:0*/
            case 'gzip':
            case 'x-gzip':
            case 'compress':
            case 'x-compress':
              // add the unzipper to the body stream processing pipeline
              streams.push(zlib.createUnzip(zlibOptions));

              // remove the content-encoding in order to not confuse downstream operations
              delete res.headers['content-encoding'];
              break;
            case 'deflate':
              streams.push(new ZlibHeaderTransformStream());

              // add the unzipper to the body stream processing pipeline
              streams.push(zlib.createUnzip(zlibOptions));

              // remove the content-encoding in order to not confuse downstream operations
              delete res.headers['content-encoding'];
              break;
            case 'br':
              if (isBrotliSupported) {
                streams.push(zlib.createBrotliDecompress(brotliOptions));
                delete res.headers['content-encoding'];
              }
              break;
            case 'zstd':
              if (isZstdSupported) {
                streams.push(zlib.createZstdDecompress(zstdOptions));
                delete res.headers['content-encoding'];
              }
              break;
          }
        }

        responseStream = streams.length > 1 ? stream.pipeline(streams, utils.noop) : streams[0];

        const response = {
          status: res.statusCode,
          statusText: res.statusMessage,
          headers: new AxiosHeaders(res.headers),
          config,
          request: lastRequest,
        };

        if (responseType === 'stream') {
          // Enforce maxContentLength on streamed responses; previously this
          // was applied only to buffered responses.
          if (maxContentLength > -1) {
            const limit = maxContentLength;
            const source = responseStream;
            async function* enforceMaxContentLength() {
              let totalResponseBytes = 0;
              for await (const chunk of source) {
                totalResponseBytes += chunk.length;
                if (totalResponseBytes > limit) {
                  throw new AxiosError(
                    'maxContentLength size of ' + limit + ' exceeded',
                    AxiosError.ERR_BAD_RESPONSE,
                    config,
                    lastRequest
                  );
                }
                yield chunk;
              }
            }
            responseStream = stream.Readable.from(enforceMaxContentLength(), {
              objectMode: false,
            });
          }
          response.data = responseStream;
          settle(resolve, reject, response);
        } else {
          const responseBuffer = [];
          let totalResponseBytes = 0;

          responseStream.on('data', function handleStreamData(chunk) {
            responseBuffer.push(chunk);
            totalResponseBytes += chunk.length;

            // make sure the content length is not over the maxContentLength if specified
            if (maxContentLength > -1 && totalResponseBytes > maxContentLength) {
              // stream.destroy() emit aborted event before calling reject() on Node.js v16
              rejected = true;
              responseStream.destroy();
              abort(
                new AxiosError(
                  'maxContentLength size of ' + maxContentLength + ' exceeded',
                  AxiosError.ERR_BAD_RESPONSE,
                  config,
                  lastRequest
                )
              );
            }
          });

          responseStream.on('aborted', function handlerStreamAborted() {
            if (rejected) {
              return;
            }

            const err = new AxiosError(
              'stream has been aborted',
              AxiosError.ERR_BAD_RESPONSE,
              config,
              lastRequest,
              response
            );
            responseStream.destroy(err);
            reject(err);
          });

          responseStream.on('error', function handleStreamError(err) {
            if (rejected) return;
            reject(AxiosError.from(err, null, config, lastRequest, response));
          });

          responseStream.on('end', function handleStreamEnd() {
            try {
              let responseData =
                responseBuffer.length === 1 ? responseBuffer[0] : Buffer.concat(responseBuffer);
              if (responseType !== 'arraybuffer') {
                responseData = responseData.toString(responseEncoding);
                if (!responseEncoding || responseEncoding === 'utf8') {
                  responseData = utils.stripBOM(responseData);
                }
              }
              response.data = responseData;
            } catch (err) {
              return reject(AxiosError.from(err, null, config, response.request, response));
            }
            settle(resolve, reject, response);
          });
        }

        abortEmitter.once('abort', (err) => {
          if (!responseStream.destroyed) {
            responseStream.emit('error', err);
            responseStream.destroy();
          }
        });
      });

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

expand_more 3 low-confidence finding(s)

low egress dependency Excluded from app score #fd12f4bb88971e4f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/adapters/http.js:494

    const req = session.request(http2Headers);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1982a5e4093052d1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/adapters/http.js:1062

      req = transport.request(options, function handleResponse(res) {
        clearConnectPhaseTimer();

        if (req.destroyed) return;

        const streams = [res];

        const responseLength = utils.toFiniteNumber(res.headers['content-length']);

        if (onDownloadProgress || maxDownloadRate) {
          const transformStream = new AxiosTransformStream({
            maxRate: utils.toFiniteNumber(maxDownloadRate),
          });

          onDownloadProgress &&
            transformStream.on(
              'progress',
              flushOnFinish(
                transformStream,
                progressEventDecorator(
                  responseLength,
                  progressEventReducer(asyncDecorator(onDownloadProgress), true, 3)
                )
              )
            );

          streams.push(transformStream);
        }

        // decompress the response body transparently if required
        let responseStream = res;

        // return the last request in case of redirects
        const lastRequest = res.req || req;

        // if decompress disabled we should not decompress
        if (decompress !== false && res.headers['content-encoding']) {
          // if no content, but headers still say that it is encoded,
          // remove the header not confuse downstream operations
          if (method === 'HEAD' || res.statusCode === 204) {
            delete res.headers['content-encoding'];
          }

          switch ((res.headers['content-encoding'] || '').toLowerCase()) {
            /*eslint default-case:0*/
            case 'gzip':
            case 'x-gzip':
            case 'compress':
            case 'x-compress':
              // add the unzipper to the body stream processing pipeline
              streams.push(zlib.createUnzip(zlibOptions));

              // remove the content-encoding in order to not confuse downstream operations
              delete res.headers['content-encoding'];
              break;
            case 'deflate':
              streams.push(new ZlibHeaderTransformStream());

              // add the unzipper to the body stream processing pipeline
              streams.push(zlib.createUnzip(zlibOptions));

              // remove the content-encoding in order to not confuse downstream operations
              delete res.headers['content-encoding'];
              break;
            case 'br':
              if (isBrotliSupported) {
                streams.push(zlib.createBrotliDecompress(brotliOptions));
                delete res.headers['content-encoding'];
              }
              break;
            case 'zstd':
              if (isZstdSupported) {
                streams.push(zlib.createZstdDecompress(zstdOptions));
                delete res.headers['content-encoding'];
              }
              break;
          }
        }

        responseStream = streams.length > 1 ? stream.pipeline(streams, utils.noop) : streams[0];

        const response = {
          status: res.statusCode,
          statusText: res.statusMessage,
          headers: new AxiosHeaders(res.headers),
          config,
          request: lastRequest,
        };

        if (responseType === 'stream') {
          // Enforce maxContentLength on streamed responses; previously this
          // was applied only to buffered responses.
          if (maxContentLength > -1) {
            const limit = maxContentLength;
            const source = responseStream;
            async function* enforceMaxContentLength() {
              let totalResponseBytes = 0;
              for await (const chunk of source) {
                totalResponseBytes += chunk.length;
                if (totalResponseBytes > limit) {
                  throw new AxiosError(
                    'maxContentLength size of ' + limit + ' exceeded',
                    AxiosError.ERR_BAD_RESPONSE,
                    config,
                    lastRequest
                  );
                }
                yield chunk;
              }
            }
            responseStream = stream.Readable.from(enforceMaxContentLength(), {
              objectMode: false,
            });
          }
          response.data = responseStream;
          settle(resolve, reject, response);
        } else {
          const responseBuffer = [];
          let totalResponseBytes = 0;

          responseStream.on('data', function handleStreamData(chunk) {
            responseBuffer.push(chunk);
            totalResponseBytes += chunk.length;

            // make sure the content length is not over the maxContentLength if specified
            if (maxContentLength > -1 && totalResponseBytes > maxContentLength) {
              // stream.destroy() emit aborted event before calling reject() on Node.js v16
              rejected = true;
              responseStream.destroy();
              abort(
                new AxiosError(
                  'maxContentLength size of ' + maxContentLength + ' exceeded',
                  AxiosError.ERR_BAD_RESPONSE,
                  config,
                  lastRequest
                )
              );
            }
          });

          responseStream.on('aborted', function handlerStreamAborted() {
            if (rejected) {
              return;
            }

            const err = new AxiosError(
              'stream has been aborted',
              AxiosError.ERR_BAD_RESPONSE,
              config,
              lastRequest,
              response
            );
            responseStream.destroy(err);
            reject(err);
          });

          responseStream.on('error', function handleStreamError(err) {
            if (rejected) return;
            reject(AxiosError.from(err, null, config, lastRequest, response));
          });

          responseStream.on('end', function handleStreamEnd() {
            try {
              let responseData =
                responseBuffer.length === 1 ? responseBuffer[0] : Buffer.concat(responseBuffer);
              if (responseType !== 'arraybuffer') {
                responseData = responseData.toString(responseEncoding);
                if (!responseEncoding || responseEncoding === 'utf8') {
                  responseData = utils.stripBOM(responseData);
                }
              }
              response.data = responseData;
            } catch (err) {
              return reject(AxiosError.from(err, null, config, response.request, response));
            }
            settle(resolve, reject, response);
          });
        }

        abortEmitter.once('abort', (err) => {
          if (!responseStream.destroyed) {
            responseStream.emit('error', err);
            responseStream.destroy();
          }
        });
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #1b8d32d33851b2bd — Environment-variable access.

pkgs/npm/[email protected]/lib/helpers/shouldBypassProxy.js:168

  const noProxy = (process.env.no_proxy || process.env.NO_PROXY || '').toLowerCase();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@ai-sdk/google

npm dependency

expand_more 1 low-confidence finding(s)

low egress dependency Excluded from app score #2b4a0be21926f462 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/interactions/cancel-google-interaction.ts:37

    const response = await fetch(url, {
      method: 'POST',
      headers: withUserAgentSuffix(
        combineHeaders({ 'Content-Type': 'application/json' }, headers),
        getRuntimeEnvironmentUserAgent(),
      ),
      body: '{}',
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@ai-sdk/google-vertex

npm dependency

expand_more 1 low-confidence finding(s)

low egress dependency Excluded from app score #f936ccc2d8747f3a — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/edge/google-vertex-auth-edge.ts:139

    const response = await fetch('https://oauth2.googleapis.com/token', {
      method: 'POST',
      headers: withUserAgentSuffix(
        { 'Content-Type': 'application/x-www-form-urlencoded' },
        `ai-sdk/google-vertex/${VERSION}`,
        getRuntimeEnvironmentUserAgent(),
      ),
      body: new URLSearchParams({
        grant_type: 'urn:ietf:params:oauth:grant-type:jwt-bearer',
        assertion: jwt,
      }),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@anthropic-ai/sdk

npm dependency

expand_more 266 low-confidence finding(s)

low env_fs dependency Excluded from app score #e95ad07ea95ffabb — Filesystem access.

pkgs/npm/@[email protected]/core/credentials.js:110

        configRaw = await fs.promises.readFile(configPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a7ab9ef01d09627 — Filesystem access.

pkgs/npm/@[email protected]/core/credentials.js:210

        raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #055928157c2c8814 — Filesystem access.

pkgs/npm/@[email protected]/core/credentials.js:308

        return (await fs.promises.readFile(filePath, 'utf-8')).trim() || 'default';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f408aadb0b7e8661 — Filesystem access.

pkgs/npm/@[email protected]/core/credentials.mjs:73

        configRaw = await fs.promises.readFile(configPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #186e2063e1091bdd — Filesystem access.

pkgs/npm/@[email protected]/core/credentials.mjs:172

        raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7079fab800554bc — Filesystem access.

pkgs/npm/@[email protected]/core/credentials.mjs:268

        return (await fs.promises.readFile(filePath, 'utf-8')).trim() || 'default';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b7bb4ec90ccdadb — Filesystem access.

pkgs/npm/@[email protected]/lib/credentials/credential-chain.js:203

            const raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d3217d10ed7d6149 — Filesystem access.

pkgs/npm/@[email protected]/lib/credentials/credential-chain.mjs:166

            const raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9df05efb52ce845e — Filesystem access.

pkgs/npm/@[email protected]/lib/credentials/identity-token.js:51

            content = await fs.promises.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2bfe7362a967fef1 — Filesystem access.

pkgs/npm/@[email protected]/lib/credentials/identity-token.mjs:14

            content = await fs.promises.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e93d61c9f1ca512 — Filesystem access.

pkgs/npm/@[email protected]/lib/credentials/types.js:195

            await fh.writeFile(JSON.stringify(data, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40d8b95c7bc46bce — Filesystem access.

pkgs/npm/@[email protected]/lib/credentials/types.mjs:154

            await fh.writeFile(JSON.stringify(data, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #863b80a3fc516d12 — Filesystem access.

pkgs/npm/@[email protected]/lib/credentials/user-oauth.js:56

            raw = await fs.promises.readFile(config.credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f1ac343b636ca4f — Filesystem access.

pkgs/npm/@[email protected]/lib/credentials/user-oauth.mjs:20

            raw = await fs.promises.readFile(config.credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #8eb352a5714d614a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/agents/agents.js:53

        return this._client.get((0, path_1.path) `/v1/agents/${agentID}?beta=true`, {
            query,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9173d3defb33b1ed — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/agents/agents.js:76

        return this._client.post((0, path_1.path) `/v1/agents/${agentID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #73ccd94c746f76ed — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/agents/agents.js:120

        return this._client.post((0, path_1.path) `/v1/agents/${agentID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0f2d9bd9d688f30a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/agents/agents.mjs:49

        return this._client.get(path `/v1/agents/${agentID}?beta=true`, {
            query,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5e73fa00662e5aa5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/agents/agents.mjs:72

        return this._client.post(path `/v1/agents/${agentID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3bd1a62d9d1b55c7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/agents/agents.mjs:116

        return this._client.post(path `/v1/agents/${agentID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c0df1e38b1b6887f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployment-runs.js:23

        return this._client.get((0, path_1.path) `/v1/deployment_runs/${deploymentRunID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c100e3cfd1a395d8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployment-runs.mjs:20

        return this._client.get(path `/v1/deployment_runs/${deploymentRunID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a1d23ce5817b8bbc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployments.js:58

        return this._client.get((0, path_1.path) `/v1/deployments/${deploymentID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #12c6ed99b283279a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployments.js:79

        return this._client.post((0, path_1.path) `/v1/deployments/${deploymentID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #37f99c4172d8e959 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployments.js:123

        return this._client.post((0, path_1.path) `/v1/deployments/${deploymentID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #85c814b116c86e24 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployments.js:144

        return this._client.post((0, path_1.path) `/v1/deployments/${deploymentID}/pause?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ac1a750e753a4671 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployments.js:165

        return this._client.post((0, path_1.path) `/v1/deployments/${deploymentID}/run?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #172c5633722bb4aa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployments.js:186

        return this._client.post((0, path_1.path) `/v1/deployments/${deploymentID}/unpause?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6c1c3310e003b44c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployments.mjs:55

        return this._client.get(path `/v1/deployments/${deploymentID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #01780932282766f3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployments.mjs:76

        return this._client.post(path `/v1/deployments/${deploymentID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e73d80d25fc50ca8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployments.mjs:120

        return this._client.post(path `/v1/deployments/${deploymentID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a37d041eb3390fc9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployments.mjs:141

        return this._client.post(path `/v1/deployments/${deploymentID}/pause?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3abaaf17302089b6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployments.mjs:162

        return this._client.post(path `/v1/deployments/${deploymentID}/run?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #76aa7b3e6808ffdc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployments.mjs:183

        return this._client.post(path `/v1/deployments/${deploymentID}/unpause?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c1691a015256e6d9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/dreams.js:44

        return this._client.get((0, path_1.path) `/v1/dreams/${dreamID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #98ef450ccff89e87 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/dreams.js:86

        return this._client.post((0, path_1.path) `/v1/dreams/${dreamID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2c053d636af9d8aa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/dreams.js:106

        return this._client.post((0, path_1.path) `/v1/dreams/${dreamID}/cancel?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b86de9debe5887e0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/dreams.mjs:41

        return this._client.get(path `/v1/dreams/${dreamID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5524ae7b688d9cdb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/dreams.mjs:83

        return this._client.post(path `/v1/dreams/${dreamID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8028f5e9dbe3038e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/dreams.mjs:103

        return this._client.post(path `/v1/dreams/${dreamID}/cancel?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #41397559bdb23aae — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/environments.js:52

        return this._client.get((0, path_1.path) `/v1/environments/${environmentID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #aa56fdecc62f992d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/environments.js:73

        return this._client.post((0, path_1.path) `/v1/environments/${environmentID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a51e9290fa198c38 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/environments.js:139

        return this._client.post((0, path_1.path) `/v1/environments/${environmentID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6d90b7ce9cd37c01 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/environments.mjs:48

        return this._client.get(path `/v1/environments/${environmentID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d965181f631837c0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/environments.mjs:69

        return this._client.post(path `/v1/environments/${environmentID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #307aa8fd6c05da78 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/environments.mjs:135

        return this._client.post(path `/v1/environments/${environmentID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #14d1113ceb75ebd5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.js:30

        return this._client.get((0, path_1.path) `/v1/environments/${environment_id}/work/${workID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #973f9a2767476652 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.js:57

        return this._client.post((0, path_1.path) `/v1/environments/${environment_id}/work/${workID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b3584d70e1e0e61e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.js:114

        return this._client.post((0, path_1.path) `/v1/environments/${environment_id}/work/${workID}/ack?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b061d13be14672e1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.js:140

        return this._client.post((0, path_1.path) `/v1/environments/${environment_id}/work/${workID}/heartbeat?beta=true`, {
            query: { desired_ttl_seconds, expected_last_heartbeat },
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #714d5bd0d7c8326a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.js:167

        return this._client.get((0, path_1.path) `/v1/environments/${environmentID}/work/poll?beta=true`, {
            query,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                {
                    'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString(),
                    ...(anthropicWorkerID != null ? { 'Anthropic-Worker-ID': anthropicWorkerID } : undefined),
                },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f07a0fb9b341f4ba — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.js:192

        return this._client.get((0, path_1.path) `/v1/environments/${environmentID}/work/stats?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9d7998ff3b607217 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.js:218

        return this._client.post((0, path_1.path) `/v1/environments/${environment_id}/work/${workID}/stop?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6b3f1e96fad622ff — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.mjs:27

        return this._client.get(path `/v1/environments/${environment_id}/work/${workID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #561245deb30110b9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.mjs:54

        return this._client.post(path `/v1/environments/${environment_id}/work/${workID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1f51ea03c40e1788 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.mjs:111

        return this._client.post(path `/v1/environments/${environment_id}/work/${workID}/ack?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0daf55b05805419a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.mjs:137

        return this._client.post(path `/v1/environments/${environment_id}/work/${workID}/heartbeat?beta=true`, {
            query: { desired_ttl_seconds, expected_last_heartbeat },
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0503502886287cab — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.mjs:164

        return this._client.get(path `/v1/environments/${environmentID}/work/poll?beta=true`, {
            query,
            ...options,
            headers: buildHeaders([
                {
                    'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString(),
                    ...(anthropicWorkerID != null ? { 'Anthropic-Worker-ID': anthropicWorkerID } : undefined),
                },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8ecdae1bb8831b02 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.mjs:189

        return this._client.get(path `/v1/environments/${environmentID}/work/stats?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b3889ad9ac653647 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.mjs:215

        return this._client.post(path `/v1/environments/${environment_id}/work/${workID}/stop?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ee413420643c47b9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/files.js:69

        return this._client.get((0, path_1.path) `/v1/files/${fileID}/content?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                {
                    'anthropic-beta': [...(betas ?? []), 'files-api-2025-04-14'].toString(),
                    Accept: 'application/binary',
                },
                options?.headers,
            ]),
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d66ca6f01c5bffab — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/files.js:92

        return this._client.get((0, path_1.path) `/v1/files/${fileID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'files-api-2025-04-14'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8f001b5ae8787c75 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/files.mjs:66

        return this._client.get(path `/v1/files/${fileID}/content?beta=true`, {
            ...options,
            headers: buildHeaders([
                {
                    'anthropic-beta': [...(betas ?? []), 'files-api-2025-04-14'].toString(),
                    Accept: 'application/binary',
                },
                options?.headers,
            ]),
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a7dce33ea043e050 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/files.mjs:89

        return this._client.get(path `/v1/files/${fileID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'files-api-2025-04-14'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b48d3bb7dda6be8a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memories.js:24

        return this._client.post((0, path_1.path) `/v1/memory_stores/${memoryStoreID}/memories?beta=true`, {
            query: { view },
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d97704f0f39a6597 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memories.js:48

        return this._client.get((0, path_1.path) `/v1/memory_stores/${memory_store_id}/memories/${memoryID}?beta=true`, {
            query,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #89ad8121e88f9e61 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memories.js:71

        return this._client.post((0, path_1.path) `/v1/memory_stores/${memory_store_id}/memories/${memoryID}?beta=true`, {
            query: { view },
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #69c4ffd3b4a35bc6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memories.mjs:21

        return this._client.post(path `/v1/memory_stores/${memoryStoreID}/memories?beta=true`, {
            query: { view },
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fe73140ec47c60eb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memories.mjs:45

        return this._client.get(path `/v1/memory_stores/${memory_store_id}/memories/${memoryID}?beta=true`, {
            query,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1ce0fae1a9592542 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memories.mjs:68

        return this._client.post(path `/v1/memory_stores/${memory_store_id}/memories/${memoryID}?beta=true`, {
            query: { view },
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #186e1bae4dc98b66 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-stores.js:53

        return this._client.get((0, path_1.path) `/v1/memory_stores/${memoryStoreID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d90a06d495345222 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-stores.js:72

        return this._client.post((0, path_1.path) `/v1/memory_stores/${memoryStoreID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e89d11d8a52756e7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-stores.js:133

        return this._client.post((0, path_1.path) `/v1/memory_stores/${memoryStoreID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1177dbfdc666f62c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-stores.mjs:49

        return this._client.get(path `/v1/memory_stores/${memoryStoreID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fcb8a13d7aa1f26e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-stores.mjs:68

        return this._client.post(path `/v1/memory_stores/${memoryStoreID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d0a8f68585311031 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-stores.mjs:129

        return this._client.post(path `/v1/memory_stores/${memoryStoreID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0f8dbebc6e9a6e45 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-versions.js:24

        return this._client.get((0, path_1.path) `/v1/memory_stores/${memory_store_id}/memory_versions/${memoryVersionID}?beta=true`, {
            query,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #152525d2e0a0f65c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-versions.js:71

        return this._client.post((0, path_1.path) `/v1/memory_stores/${memory_store_id}/memory_versions/${memoryVersionID}/redact?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #eaf77fe479517036 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-versions.mjs:21

        return this._client.get(path `/v1/memory_stores/${memory_store_id}/memory_versions/${memoryVersionID}?beta=true`, {
            query,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d3204bf6de6b7a17 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-versions.mjs:68

        return this._client.post(path `/v1/memory_stores/${memory_store_id}/memory_versions/${memoryVersionID}/redact?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7d86ff0020b8d30c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/messages/batches.js:73

        return this._client.get((0, path_1.path) `/v1/messages/batches/${messageBatchID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'message-batches-2024-09-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8d7f483d0cc0a6c2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/messages/batches.js:158

        return this._client.post((0, path_1.path) `/v1/messages/batches/${messageBatchID}/cancel?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'message-batches-2024-09-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8806879d32d92f1b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/messages/batches.js:190

        return this._client
            .get(batch.results_url, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                {
                    'anthropic-beta': [...(betas ?? []), 'message-batches-2024-09-24'].toString(),
                    Accept: 'application/binary',
                },
                options?.headers,
            ]),
            stream: true,
            __binaryResponse: true,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #11257159c32279d4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/messages/batches.mjs:70

        return this._client.get(path `/v1/messages/batches/${messageBatchID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'message-batches-2024-09-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #278165f8108512a2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/messages/batches.mjs:155

        return this._client.post(path `/v1/messages/batches/${messageBatchID}/cancel?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'message-batches-2024-09-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #20baf2411880723d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/messages/batches.mjs:187

        return this._client
            .get(batch.results_url, {
            ...options,
            headers: buildHeaders([
                {
                    'anthropic-beta': [...(betas ?? []), 'message-batches-2024-09-24'].toString(),
                    Accept: 'application/binary',
                },
                options?.headers,
            ]),
            stream: true,
            __binaryResponse: true,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5a490cb9a944caf2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/models.js:25

        return this._client.get((0, path_1.path) `/v1/models/${modelID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #71e6153d1ae00090 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/models.mjs:22

        return this._client.get(path `/v1/models/${modelID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #132d8ba1f1d801b6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/events.js:61

        return this._client.post((0, path_1.path) `/v1/sessions/${sessionID}/events?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0008055846a9f7e5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/events.js:83

        return this._client.get((0, path_1.path) `/v1/sessions/${sessionID}/events/stream?beta=true`, {
            query,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
            stream: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6a02b13332129d91 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/events.mjs:58

        return this._client.post(path `/v1/sessions/${sessionID}/events?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #230ba7710a8632d8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/events.mjs:80

        return this._client.get(path `/v1/sessions/${sessionID}/events/stream?beta=true`, {
            query,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
            stream: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #51228526bd811af1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/resources.js:24

        return this._client.get((0, path_1.path) `/v1/sessions/${session_id}/resources/${resourceID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #40cdb3b0479bbcc5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/resources.js:49

        return this._client.post((0, path_1.path) `/v1/sessions/${session_id}/resources/${resourceID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c1e2c34c9820a414 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/resources.js:121

        return this._client.post((0, path_1.path) `/v1/sessions/${sessionID}/resources?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #362af2af3098e5c8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/resources.mjs:21

        return this._client.get(path `/v1/sessions/${session_id}/resources/${resourceID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2af70ee3e8ec65de — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/resources.mjs:46

        return this._client.post(path `/v1/sessions/${session_id}/resources/${resourceID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #af8f780f8c915140 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/resources.mjs:118

        return this._client.post(path `/v1/sessions/${sessionID}/resources?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #367765fcb5c1f9f0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/sessions.js:59

        return this._client.get((0, path_1.path) `/v1/sessions/${sessionID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fb5b3ab31b670d5b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/sessions.js:80

        return this._client.post((0, path_1.path) `/v1/sessions/${sessionID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fcb12ac192c7bae5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/sessions.js:145

        return this._client.post((0, path_1.path) `/v1/sessions/${sessionID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9f6feeb0dcf813fc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/sessions.mjs:55

        return this._client.get(path `/v1/sessions/${sessionID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #12d5b12ccf660320 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/sessions.mjs:76

        return this._client.post(path `/v1/sessions/${sessionID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #eb416dcb3070ce93 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/sessions.mjs:141

        return this._client.post(path `/v1/sessions/${sessionID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #59918369eb6441ba — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/threads/events.js:49

        return this._client.get((0, path_1.path) `/v1/sessions/${session_id}/threads/${threadID}/stream?beta=true`, {
            query,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
            stream: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2ea484d4ca02fb40 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/threads/events.mjs:46

        return this._client.get(path `/v1/sessions/${session_id}/threads/${threadID}/stream?beta=true`, {
            query,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
            stream: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c9facdb9d45daed5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/threads/threads.js:31

        return this._client.get((0, path_1.path) `/v1/sessions/${session_id}/threads/${threadID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0f459aa1e67e2848 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/threads/threads.js:77

        return this._client.post((0, path_1.path) `/v1/sessions/${session_id}/threads/${threadID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1cefef624e64f311 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/threads/threads.mjs:27

        return this._client.get(path `/v1/sessions/${session_id}/threads/${threadID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #79caa4e9a478364a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/threads/threads.mjs:73

        return this._client.post(path `/v1/sessions/${session_id}/threads/${threadID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9dc78b19ced96d49 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/skills/skills.js:49

        return this._client.get((0, path_1.path) `/v1/skills/${skillID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b25d95d150c1bf6b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/skills/skills.mjs:45

        return this._client.get(path `/v1/skills/${skillID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9111419f0d24bfb6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/skills/versions.js:24

        return this._client.post((0, path_1.path) `/v1/skills/${skillID}/versions?beta=true`, (0, uploads_1.multipartFormRequestOptions)({
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString() },
                options?.headers,
            ]),
        }, this._client, false));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0f644432954bc9fd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/skills/versions.js:46

        return this._client.get((0, path_1.path) `/v1/skills/${skill_id}/versions/${version}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f2f6e56c4e315e5b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/skills/versions.js:115

        return this._client.get((0, path_1.path) `/v1/skills/${skill_id}/versions/${version}/content?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                {
                    'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString(),
                    Accept: 'application/binary',
                },
                options?.headers,
            ]),
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2aa3c60e4a941f54 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/skills/versions.mjs:21

        return this._client.post(path `/v1/skills/${skillID}/versions?beta=true`, multipartFormRequestOptions({
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString() },
                options?.headers,
            ]),
        }, this._client, false));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f82473ac0e87acbf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/skills/versions.mjs:43

        return this._client.get(path `/v1/skills/${skill_id}/versions/${version}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #32b38fbf3f4ef540 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/skills/versions.mjs:112

        return this._client.get(path `/v1/skills/${skill_id}/versions/${version}/content?beta=true`, {
            ...options,
            headers: buildHeaders([
                {
                    'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString(),
                    Accept: 'application/binary',
                },
                options?.headers,
            ]),
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #69ddbaf90275d47e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/certificates.js:31

        return this._client.post((0, path_1.path) `/v1/tunnels/${tunnelID}/certificates?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ccf62477265344fa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/certificates.js:59

        return this._client.get((0, path_1.path) `/v1/tunnels/${tunnel_id}/certificates/${certificateID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a42b18bfc6d881df — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/certificates.js:119

        return this._client.post((0, path_1.path) `/v1/tunnels/${tunnel_id}/certificates/${certificateID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a4d287c33cf4ac2e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/certificates.mjs:28

        return this._client.post(path `/v1/tunnels/${tunnelID}/certificates?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #dd8c05f00be597bc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/certificates.mjs:56

        return this._client.get(path `/v1/tunnels/${tunnel_id}/certificates/${certificateID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #78c53da441ecee0d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/certificates.mjs:116

        return this._client.post(path `/v1/tunnels/${tunnel_id}/certificates/${certificateID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d4c35166ddaf9f46 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/tunnels.js:60

        return this._client.get((0, path_1.path) `/v1/tunnels/${tunnelID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4ce86ee445f67627 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/tunnels.js:116

        return this._client.post((0, path_1.path) `/v1/tunnels/${tunnelID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a9848cb83416e97b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/tunnels.js:143

        return this._client.post((0, path_1.path) `/v1/tunnels/${tunnelID}/reveal_token?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #87585374851d93bb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/tunnels.js:169

        return this._client.post((0, path_1.path) `/v1/tunnels/${tunnelID}/rotate_token?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e92f9cf832067d40 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/tunnels.mjs:56

        return this._client.get(path `/v1/tunnels/${tunnelID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4b8878aac21a0093 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/tunnels.mjs:112

        return this._client.post(path `/v1/tunnels/${tunnelID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2f91344c467feddb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/tunnels.mjs:139

        return this._client.post(path `/v1/tunnels/${tunnelID}/reveal_token?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b0254f0c432f1a7a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/tunnels.mjs:165

        return this._client.post(path `/v1/tunnels/${tunnelID}/rotate_token?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #88056c9570c40b57 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/user-profiles.js:43

        return this._client.get((0, path_1.path) `/v1/user_profiles/${userProfileID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f6a2d83c9e8494a1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/user-profiles.js:64

        return this._client.post((0, path_1.path) `/v1/user_profiles/${userProfileID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c952851a7278b180 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/user-profiles.js:108

        return this._client.post((0, path_1.path) `/v1/user_profiles/${userProfileID}/enrollment_url?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f83bf55cda9b0020 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/user-profiles.mjs:40

        return this._client.get(path `/v1/user_profiles/${userProfileID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c91faf5179334334 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/user-profiles.mjs:61

        return this._client.post(path `/v1/user_profiles/${userProfileID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5c922a108eb331bf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/user-profiles.mjs:105

        return this._client.post(path `/v1/user_profiles/${userProfileID}/enrollment_url?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #08eb57890a51f118 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/credentials.js:31

        return this._client.post((0, path_1.path) `/v1/vaults/${vaultID}/credentials?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #56cd75138f2bd834 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/credentials.js:54

        return this._client.get((0, path_1.path) `/v1/vaults/${vault_id}/credentials/${credentialID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #83d0766df82f946b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/credentials.js:76

        return this._client.post((0, path_1.path) `/v1/vaults/${vault_id}/credentials/${credentialID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f7abeebdbf6caa43 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/credentials.js:145

        return this._client.post((0, path_1.path) `/v1/vaults/${vault_id}/credentials/${credentialID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #caf95b4b6da895cb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/credentials.js:167

        return this._client.post((0, path_1.path) `/v1/vaults/${vault_id}/credentials/${credentialID}/mcp_oauth_validate?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8edb78752c1f170b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/credentials.mjs:28

        return this._client.post(path `/v1/vaults/${vaultID}/credentials?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0838c01a1d291a46 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/credentials.mjs:51

        return this._client.get(path `/v1/vaults/${vault_id}/credentials/${credentialID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #19bddf4cb980635d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/credentials.mjs:73

        return this._client.post(path `/v1/vaults/${vault_id}/credentials/${credentialID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7f844b38285be798 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/credentials.mjs:142

        return this._client.post(path `/v1/vaults/${vault_id}/credentials/${credentialID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a522603ff3cbf038 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/credentials.mjs:164

        return this._client.post(path `/v1/vaults/${vault_id}/credentials/${credentialID}/mcp_oauth_validate?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a45bd130f2b348f8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/vaults.js:52

        return this._client.get((0, path_1.path) `/v1/vaults/${vaultID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #02fabe51aa05aaed — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/vaults.js:73

        return this._client.post((0, path_1.path) `/v1/vaults/${vaultID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e8a8317d121d7934 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/vaults.js:138

        return this._client.post((0, path_1.path) `/v1/vaults/${vaultID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1a51f92bf82c53b9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/vaults.mjs:48

        return this._client.get(path `/v1/vaults/${vaultID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7a826cbd5fae7cf5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/vaults.mjs:69

        return this._client.post(path `/v1/vaults/${vaultID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f4e4d3a1d14f106c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/vaults.mjs:134

        return this._client.post(path `/v1/vaults/${vaultID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #09e51d3d3d30c0f8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/messages/batches.js:67

        return this._client.get((0, path_1.path) `/v1/messages/batches/${messageBatchID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e120c696bc94da7b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/messages/batches.js:127

        return this._client.post((0, path_1.path) `/v1/messages/batches/${messageBatchID}/cancel`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8853b11dc69eb882 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/messages/batches.js:150

        return this._client
            .get(batch.results_url, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ Accept: 'application/binary' }, options?.headers]),
            stream: true,
            __binaryResponse: true,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #442f37491dd918ed — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/messages/batches.mjs:64

        return this._client.get(path `/v1/messages/batches/${messageBatchID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7a2f1b1d35e06206 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/messages/batches.mjs:124

        return this._client.post(path `/v1/messages/batches/${messageBatchID}/cancel`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b8962eb8fed2a375 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/messages/batches.mjs:147

        return this._client
            .get(batch.results_url, {
            ...options,
            headers: buildHeaders([{ Accept: 'application/binary' }, options?.headers]),
            stream: true,
            __binaryResponse: true,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1bc90a9ba565023e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/models.js:18

        return this._client.get((0, path_1.path) `/v1/models/${modelID}`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1193e80682bb8374 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/models.mjs:15

        return this._client.get(path `/v1/models/${modelID}`, {
            ...options,
            headers: buildHeaders([
                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #25689f69f91dd09f — Filesystem access.

pkgs/npm/@[email protected]/src/core/credentials.ts:154

    configRaw = await fs.promises.readFile(configPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a0d0013716e7be01 — Filesystem access.

pkgs/npm/@[email protected]/src/core/credentials.ts:258

    raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4135f7d341942a4f — Filesystem access.

pkgs/npm/@[email protected]/src/core/credentials.ts:372

    return (await fs.promises.readFile(filePath, 'utf-8')).trim() || 'default';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bae2b29a0b68629a — Filesystem access.

pkgs/npm/@[email protected]/src/lib/credentials/credential-chain.ts:250

      const raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a2ae9b74407217d — Filesystem access.

pkgs/npm/@[email protected]/src/lib/credentials/identity-token.ts:17

      content = await fs.promises.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e237f4fb58eaeb4a — Filesystem access.

pkgs/npm/@[email protected]/src/lib/credentials/types.ts:222

      await fh.writeFile(JSON.stringify(data, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6bbdf67260c06b75 — Filesystem access.

pkgs/npm/@[email protected]/src/lib/credentials/user-oauth.ts:45

      raw = await fs.promises.readFile(config.credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #bbba5e513fc2f07e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/agents/agents.ts:58

    return this._client.get(path`/v1/agents/${agentID}?beta=true`, {
      query,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7864bbb2112729bc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/agents/agents.ts:86

    return this._client.post(path`/v1/agents/${agentID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3a707ca39ca3719d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/agents/agents.ts:139

    return this._client.post(path`/v1/agents/${agentID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c3b268db4dd6a7d5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/deployment-runs.ts:30

    return this._client.get(path`/v1/deployment_runs/${deploymentRunID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b6924d197bb25a39 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/deployments.ts:69

    return this._client.get(path`/v1/deployments/${deploymentID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #860297439b711288 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/deployments.ts:95

    return this._client.post(path`/v1/deployments/${deploymentID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d1fa01a7d3c20bf4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/deployments.ts:148

    return this._client.post(path`/v1/deployments/${deploymentID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0f55557787ff9d88 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/deployments.ts:174

    return this._client.post(path`/v1/deployments/${deploymentID}/pause?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #736b44ec92df24b4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/deployments.ts:200

    return this._client.post(path`/v1/deployments/${deploymentID}/run?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b22ff5230456f974 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/deployments.ts:226

    return this._client.post(path`/v1/deployments/${deploymentID}/unpause?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2e8102a538b83e86 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/dreams.ts:51

    return this._client.get(path`/v1/dreams/${dreamID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9070da12de99141a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/dreams.ts:102

    return this._client.post(path`/v1/dreams/${dreamID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #29a3441a1a33b56a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/dreams.ts:127

    return this._client.post(path`/v1/dreams/${dreamID}/cancel?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ab456792a682c5fc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/environments/environments.ts:74

    return this._client.get(path`/v1/environments/${environmentID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5d01d4229f58484f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/environments/environments.ts:100

    return this._client.post(path`/v1/environments/${environmentID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8608d41d4f4907d4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/environments/environments.ts:180

    return this._client.post(path`/v1/environments/${environmentID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bc2a825ce0802ad8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/environments/work.ts:43

    return this._client.get(path`/v1/environments/${environment_id}/work/${workID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #56ad09a7358f3734 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/environments/work.ts:71

    return this._client.post(path`/v1/environments/${environment_id}/work/${workID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #09145d4e5a442745 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/environments/work.ts:138

    return this._client.post(path`/v1/environments/${environment_id}/work/${workID}/ack?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #936f378b1ee47f53 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/environments/work.ts:169

    return this._client.post(path`/v1/environments/${environment_id}/work/${workID}/heartbeat?beta=true`, {
      query: { desired_ttl_seconds, expected_last_heartbeat },
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #baf32b9a37b93954 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/environments/work.ts:201

    return this._client.get(path`/v1/environments/${environmentID}/work/poll?beta=true`, {
      query,
      ...options,
      headers: buildHeaders([
        {
          'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString(),
          ...(anthropicWorkerID != null ? { 'Anthropic-Worker-ID': anthropicWorkerID } : undefined),
        },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4d3ad9769a49cfe3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/environments/work.ts:231

    return this._client.get(path`/v1/environments/${environmentID}/work/stats?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #45a7747f2738ec7c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/environments/work.ts:258

    return this._client.post(path`/v1/environments/${environment_id}/work/${workID}/stop?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a55342459f89a4c1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/files.ts:85

    return this._client.get(path`/v1/files/${fileID}/content?beta=true`, {
      ...options,
      headers: buildHeaders([
        {
          'anthropic-beta': [...(betas ?? []), 'files-api-2025-04-14'].toString(),
          Accept: 'application/binary',
        },
        options?.headers,
      ]),
      __binaryResponse: true,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2b55db914ef2e48d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/files.ts:113

    return this._client.get(path`/v1/files/${fileID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'files-api-2025-04-14'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e8bc2a6ab05cf323 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/memory-stores/memories.ts:30

    return this._client.post(path`/v1/memory_stores/${memoryStoreID}/memories?beta=true`, {
      query: { view },
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9ae61f11daf3d5d1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/memory-stores/memories.ts:59

    return this._client.get(path`/v1/memory_stores/${memory_store_id}/memories/${memoryID}?beta=true`, {
      query,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #859e36eedf48d891 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/memory-stores/memories.ts:87

    return this._client.post(path`/v1/memory_stores/${memory_store_id}/memories/${memoryID}?beta=true`, {
      query: { view },
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c14dbf4a3a835627 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/memory-stores/memory-stores.ts:91

    return this._client.get(path`/v1/memory_stores/${memoryStoreID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4674bd523048c797 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/memory-stores/memory-stores.ts:115

    return this._client.post(path`/v1/memory_stores/${memoryStoreID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #53abcf35b3de2add — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/memory-stores/memory-stores.ts:190

    return this._client.post(path`/v1/memory_stores/${memoryStoreID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8c84b913ee15b231 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/memory-stores/memory-versions.ts:31

    return this._client.get(
      path`/v1/memory_stores/${memory_store_id}/memory_versions/${memoryVersionID}?beta=true`,
      {
        query,
        ...options,
        headers: buildHeaders([
          { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
          options?.headers,
        ]),
      },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #75b58166e6909a19 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/memory-stores/memory-versions.ts:95

    return this._client.post(
      path`/v1/memory_stores/${memory_store_id}/memory_versions/${memoryVersionID}/redact?beta=true`,
      {
        ...options,
        headers: buildHeaders([
          { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
          options?.headers,
        ]),
      },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fa049eed931dc9c1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/messages/batches.ts:82

    return this._client.get(path`/v1/messages/batches/${messageBatchID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'message-batches-2024-09-24'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7f92522a408c1cdc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/messages/batches.ts:181

    return this._client.post(path`/v1/messages/batches/${messageBatchID}/cancel?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'message-batches-2024-09-24'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3bb13828f57681f3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/messages/batches.ts:221

    return this._client
      .get(batch.results_url, {
        ...options,
        headers: buildHeaders([
          {
            'anthropic-beta': [...(betas ?? []), 'message-batches-2024-09-24'].toString(),
            Accept: 'application/binary',
          },
          options?.headers,
        ]),
        stream: true,
        __binaryResponse: true,
      })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #aa70173488598706 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/models.ts:31

    return this._client.get(path`/v1/models/${modelID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4ed0229bd40ca5fb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/sessions/events.ts:82

    return this._client.post(path`/v1/sessions/${sessionID}/events?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #071a004941a00b9a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/sessions/events.ts:109

    return this._client.get(path`/v1/sessions/${sessionID}/events/stream?beta=true`, {
      query,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
      stream: true,
    }) as APIPromise<Stream<BetaManagedAgentsStreamSessionEvents>>;

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2e81a0f0feedcc52 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/sessions/resources.ts:31

    return this._client.get(path`/v1/sessions/${session_id}/resources/${resourceID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b2bad5b162457e1b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/sessions/resources.ts:61

    return this._client.post(path`/v1/sessions/${session_id}/resources/${resourceID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #740b32db8dbc9f4d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/sessions/resources.ts:152

    return this._client.post(path`/v1/sessions/${sessionID}/resources?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2eb012f6eafbfec7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/sessions/sessions.ts:174

    return this._client.get(path`/v1/sessions/${sessionID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a836c00b341e559a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/sessions/sessions.ts:200

    return this._client.post(path`/v1/sessions/${sessionID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4e4d6382636e2292 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/sessions/sessions.ts:283

    return this._client.post(path`/v1/sessions/${sessionID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #356f88a484f63bd0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/sessions/threads/events.ts:69

    return this._client.get(path`/v1/sessions/${session_id}/threads/${threadID}/stream?beta=true`, {
      query,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
      stream: true,
    }) as APIPromise<Stream<ThreadsAPI.BetaManagedAgentsStreamSessionThreadEvents>>;

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1a926a0d11f541d2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/sessions/threads/threads.ts:37

    return this._client.get(path`/v1/sessions/${session_id}/threads/${threadID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7ea3ed456c9656d6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/sessions/threads/threads.ts:97

    return this._client.post(path`/v1/sessions/${session_id}/threads/${threadID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #041a7268392ef3f7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/skills/skills.ts:73

    return this._client.get(path`/v1/skills/${skillID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e19008bc86caa721 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/skills/versions.ts:31

    return this._client.post(
      path`/v1/skills/${skillID}/versions?beta=true`,
      multipartFormRequestOptions(
        {
          body,
          ...options,
          headers: buildHeaders([
            { 'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString() },
            options?.headers,
          ]),
        },
        this._client,
        false,
      ),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a9708ceda5e1ca87 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/skills/versions.ts:65

    return this._client.get(path`/v1/skills/${skill_id}/versions/${version}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3ce46d1815b5152a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/skills/versions.ts:149

    return this._client.get(path`/v1/skills/${skill_id}/versions/${version}/content?beta=true`, {
      ...options,
      headers: buildHeaders([
        {
          'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString(),
          Accept: 'application/binary',
        },
        options?.headers,
      ]),
      __binaryResponse: true,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1bb599094e749272 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/tunnels/certificates.ts:37

    return this._client.post(path`/v1/tunnels/${tunnelID}/certificates?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #67bcf65b9c3b3a82 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/tunnels/certificates.ts:70

    return this._client.get(path`/v1/tunnels/${tunnel_id}/certificates/${certificateID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a259ac593f0820f4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/tunnels/certificates.ts:144

    return this._client.post(path`/v1/tunnels/${tunnel_id}/certificates/${certificateID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b2f12fee191c4517 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/tunnels/tunnels.ts:72

    return this._client.get(path`/v1/tunnels/${tunnelID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #aa9119b8b6441962 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/tunnels/tunnels.ts:137

    return this._client.post(path`/v1/tunnels/${tunnelID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f12f16a0cc2acf67 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/tunnels/tunnels.ts:169

    return this._client.post(path`/v1/tunnels/${tunnelID}/reveal_token?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ca3032584e166160 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/tunnels/tunnels.ts:200

    return this._client.post(path`/v1/tunnels/${tunnelID}/rotate_token?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1be5fa52a5f2f7f9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/user-profiles.ts:50

    return this._client.get(path`/v1/user_profiles/${userProfileID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #db725f390f69b38d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/user-profiles.ts:76

    return this._client.post(path`/v1/user_profiles/${userProfileID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #377e61c22c358020 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/user-profiles.ts:129

    return this._client.post(path`/v1/user_profiles/${userProfileID}/enrollment_url?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8ef93a128380a86e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/vaults/credentials.ts:37

    return this._client.post(path`/v1/vaults/${vaultID}/credentials?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d87371cc452708cb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/vaults/credentials.ts:65

    return this._client.get(path`/v1/vaults/${vault_id}/credentials/${credentialID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #49a9ba2f779ad0de — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/vaults/credentials.ts:92

    return this._client.post(path`/v1/vaults/${vault_id}/credentials/${credentialID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8d60b4fb4512c0bb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/vaults/credentials.ts:180

    return this._client.post(path`/v1/vaults/${vault_id}/credentials/${credentialID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #beb3ade6f5ea2a46 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/vaults/credentials.ts:207

    return this._client.post(
      path`/v1/vaults/${vault_id}/credentials/${credentialID}/mcp_oauth_validate?beta=true`,
      {
        ...options,
        headers: buildHeaders([
          { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
          options?.headers,
        ]),
      },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #97f9b757a1206ea2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/vaults/vaults.ts:101

    return this._client.get(path`/v1/vaults/${vaultID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1cf9f24c927f0276 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/vaults/vaults.ts:127

    return this._client.post(path`/v1/vaults/${vaultID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #73c1b61ec6e5d0b3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/vaults/vaults.ts:206

    return this._client.post(path`/v1/vaults/${vaultID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9f0f820a3f00e09a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/messages/batches.ts:71

    return this._client.get(path`/v1/messages/batches/${messageBatchID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f7dbc3444e877ffd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/messages/batches.ts:137

    return this._client.post(path`/v1/messages/batches/${messageBatchID}/cancel`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ea5d78d18ab4a715 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/messages/batches.ts:167

    return this._client
      .get(batch.results_url, {
        ...options,
        headers: buildHeaders([{ Accept: 'application/binary' }, options?.headers]),
        stream: true,
        __binaryResponse: true,
      })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2282944f871e4c54 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/models.ts:24

    return this._client.get(path`/v1/models/${modelID}`, {
      ...options,
      headers: buildHeaders([
        { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #8502d02655af49d9 — Filesystem access.

pkgs/npm/@[email protected]/src/tools/agent-toolset/fs-util.ts:112

    await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #78611ab918918b7f — Filesystem access.

pkgs/npm/@[email protected]/src/tools/agent-toolset/node.ts:457

        data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #542763de21c1291e — Filesystem access.

pkgs/npm/@[email protected]/src/tools/agent-toolset/node.ts:533

        data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5b3a16e8cc588219 — Environment-variable access.

pkgs/npm/@[email protected]/src/tools/agent-toolset/node.ts:806

  const dirs = (process.env['PATH'] ?? '').split(path.delimiter);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e44f525d14f01591 — Filesystem access.

pkgs/npm/@[email protected]/src/tools/memory/node.ts:4

import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #789f8a7c69118771 — Filesystem access.

pkgs/npm/@[email protected]/src/tools/memory/node.ts:52

    await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0ef7a46e71ab31b5 — Filesystem access.

pkgs/npm/@[email protected]/src/tools/memory/node.ts:101

    return await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8ee64983419b48b7 — Filesystem access.

pkgs/npm/@[email protected]/src/tools/memory/node.ts:256

      await handle.writeFile(command.file_text, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #98765cd8007ecdc9 — Filesystem access.

pkgs/npm/@[email protected]/tools/agent-toolset/fs-util.js:115

        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #eae533a8da89c0de — Filesystem access.

pkgs/npm/@[email protected]/tools/agent-toolset/fs-util.mjs:107

        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0bdee04de692240f — Filesystem access.

pkgs/npm/@[email protected]/tools/agent-toolset/node.js:390

                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8801a11fab5192b7 — Filesystem access.

pkgs/npm/@[email protected]/tools/agent-toolset/node.js:469

                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bce184e944b4d70b — Environment-variable access.

pkgs/npm/@[email protected]/tools/agent-toolset/node.js:755

    const dirs = (process.env['PATH'] ?? '').split(path.delimiter);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #dc6fbe9879c2efba — Filesystem access.

pkgs/npm/@[email protected]/tools/agent-toolset/node.mjs:375

                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #604d18ef7b5c63a0 — Filesystem access.

pkgs/npm/@[email protected]/tools/agent-toolset/node.mjs:454

                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #eb6aa763de58feba — Environment-variable access.

pkgs/npm/@[email protected]/tools/agent-toolset/node.mjs:740

    const dirs = (process.env['PATH'] ?? '').split(path.delimiter);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c98feb3fd6da7789 — Filesystem access.

pkgs/npm/@[email protected]/tools/memory/node.js:43

        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6b6ee993625dd30c — Filesystem access.

pkgs/npm/@[email protected]/tools/memory/node.js:91

        return await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9a7136e9e55077ef — Filesystem access.

pkgs/npm/@[email protected]/tools/memory/node.js:213

            await handle.writeFile(command.file_text, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e80b35887264043a — Filesystem access.

pkgs/npm/@[email protected]/tools/memory/node.mjs:2

import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5582e314671dc050 — Filesystem access.

pkgs/npm/@[email protected]/tools/memory/node.mjs:38

        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b7898f4b91b11e7a — Filesystem access.

pkgs/npm/@[email protected]/tools/memory/node.mjs:86

        return await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8c46b1fa20b879f5 — Filesystem access.

pkgs/npm/@[email protected]/tools/memory/node.mjs:208

            await handle.writeFile(command.file_text, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@aws-sdk/credential-providers

npm dependency

expand_more 2 low-confidence finding(s)

low env_fs dependency Excluded from app score #beb7a2243a257855 — Environment-variable access.

pkgs/npm/@[email protected]/dist-cjs/index.js:246

    return fromTemporaryCredentials$1(options, fromNodeProviderChain, async ({ profile = process.env.AWS_PROFILE }) => loadConfig({

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3eed774fba45d90c — Environment-variable access.

pkgs/npm/@[email protected]/dist-es/fromTemporaryCredentials.js:5

    return fromTemporaryCredentialsBase(options, fromNodeProviderChain, async ({ profile = process.env.AWS_PROFILE }) => loadConfig({

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@modelcontextprotocol/sdk

npm dependency

expand_more 136 low-confidence finding(s)

low egress dependency Excluded from app score #58ab04f0df18bb76 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/cli.ts:54

  await client.request({ method: "resources/list" }, ListResourcesResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #56001028ecb7d68e — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/client/auth.test.ts:31

      expect(extractResourceMetadataUrl(mockResponse)).toEqual(new URL(resourceUrl));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2b9264889fe4f04c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/client/auth.ts:236

    response = await fetch(url, {
      headers: {
        "MCP-Protocol-Version": opts?.protocolVersion ?? LATEST_PROTOCOL_VERSION
      }
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ce4c7feb8d35551b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/client/auth.ts:244

      response = await fetch(url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #85346924fd4dc9ff — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/client/auth.ts:275

    response = await fetch(url, {
      headers: {
        "MCP-Protocol-Version": opts?.protocolVersion ?? LATEST_PROTOCOL_VERSION
      }
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #06b3968fd752cdeb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/client/auth.ts:283

      response = await fetch(url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b9a9ac7c8dfdbebc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/client/auth.ts:421

  const response = await fetch(tokenUrl, {
    method: "POST",
    headers: {
      "Content-Type": "application/x-www-form-urlencoded",
    },
    body: params,
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f52616221e523573 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/client/auth.ts:480

  const response = await fetch(tokenUrl, {
    method: "POST",
    headers: {
      "Content-Type": "application/x-www-form-urlencoded",
    },
    body: params,
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #dc05d7a1454587df — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/client/auth.ts:519

  const response = await fetch(registrationUrl, {
    method: "POST",
    headers: {
      "Content-Type": "application/json",
    },
    body: JSON.stringify(clientMetadata),
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #c0c4037505c763e4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/client/index.test.ts:660

    weatherClient.request(
      {
        method: "weather/get",
        params: {
          city: "Seattle",
        },
      },
      WeatherResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #f86953ba2cfc504d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/client/sse.test.ts:250

        return fetch(url.toString(), { ...init, headers });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fa2fba17aaeda257 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/client/sse.ts:118

          fetch: (url, init) => this._commonHeaders().then((headers) => fetch(url, {
            ...init,
            headers: {
              ...headers,
              Accept: "text/event-stream"
            }
          })),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d7726a8a0c686ab6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/client/sse.ts:227

      const response = await fetch(this._endpoint, init);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #2cdd15d10369c66b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/client/stdio.ts:70

    const value = process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #6f811ff2f2c567ee — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/client/streamableHttp.ts:196

      const response = await fetch(this._url, {
        method: "GET",
        headers,
        signal: this._abortController?.signal,
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b86e2820079425cd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/client/streamableHttp.ts:396

      const response = await fetch(this._url, init);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b75e4d415fe7a7d6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/client/streamableHttp.ts:502

      const response = await fetch(this._url, init);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #fbc4341c45132c75 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/multipleClientsParallel.ts:69

    const result = await client.request(toolRequest, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #673c2a1c8667f5a3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/parallelToolCallsClient.ts:97

    const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #db7d6fa5d8f0be12 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/parallelToolCallsClient.ts:169

      return client.request(request, CallToolResultSchema)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #7230c31b0e2cdfda — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleOAuthClient.ts:303

      const result = await this.client.request(request, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #1fd729ff96a20def — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleOAuthClient.ts:361

      const result = await this.client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #d1991d9fafcf4272 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleOAuthClient.ts:393

  const serverUrl = process.env.MCP_SERVER_URL || DEFAULT_SERVER_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #78f88d44e5caaa99 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:225

        const resourcesResult = await client.request({
          method: 'resources/list',
          params: {}
        }, ListResourcesResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #137e1f805462b69b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:313

    const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #ddb8a92387e01d5d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:344

    const result = await client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #93108037622a63af — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:397

    const result = await client.request(request, CallToolResultSchema, {
      resumptionToken: notificationsToolLastEventId,
      onresumptiontoken: onLastEventIdUpdate
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #7757b39271ff6853 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:426

    const promptsResult = await client.request(promptsRequest, ListPromptsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #5037a7eb4d0caa64 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:455

    const promptResult = await client.request(promptRequest, GetPromptResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #4ed952710fbb131a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:476

    const resourcesResult = await client.request(resourcesRequest, ListResourcesResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #eab3a3e1c73ff9b4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/streamableHttpWithSseFallbackClient.ts:140

    const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #154580d078c216f1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/streamableHttpWithSseFallbackClient.ts:173

    const result = await client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #ebc77b73184afca9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/server/simpleStreamableHttp.ts:192

      const response = await fetch(endpoint, {
        method: 'POST',
        headers: {
          'Content-Type': 'application/x-www-form-urlencoded',
        },
        body: new URLSearchParams({
          token: token
        }).toString()
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #58f9bdc67c2ba588 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/integration-tests/stateManagementStreamableHttp.test.ts:126

      await client1.request({
        method: 'tools/list',
        params: {}
      }, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #979fd7588f9aad39 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/integration-tests/stateManagementStreamableHttp.test.ts:143

      await client2.request({
        method: 'tools/list',
        params: {}
      }, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #29474b1ceeaaa1a9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/integration-tests/stateManagementStreamableHttp.test.ts:164

      const toolsResult = await client.request({
        method: 'tools/list',
        params: {}
      }, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #3232acb134b81a74 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/integration-tests/stateManagementStreamableHttp.test.ts:175

      const resourcesResult = await client.request({
        method: 'resources/list',
        params: {}
      }, ListResourcesResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #abcacd243bbc12cf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/integration-tests/stateManagementStreamableHttp.test.ts:184

      const promptsResult = await client.request({
        method: 'prompts/list',
        params: {}
      }, ListPromptsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #21a0df881cd9e21c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/integration-tests/stateManagementStreamableHttp.test.ts:196

      const greetingResult = await client.request({
        method: 'tools/call',
        params: {
          name: 'greet',
          arguments: {
            name: 'Stateless Transport'
          }
        }
      }, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #4b2d734b6234c151 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/integration-tests/stateManagementStreamableHttp.test.ts:252

      const toolsResult = await client.request({
        method: 'tools/list',
        params: {}
      }, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #60c1424d7c76e0f4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/integration-tests/stateManagementStreamableHttp.test.ts:263

      const resourcesResult = await client.request({
        method: 'resources/list',
        params: {}
      }, ListResourcesResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #04d636adb38c02af — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/integration-tests/stateManagementStreamableHttp.test.ts:272

      const promptsResult = await client.request({
        method: 'prompts/list',
        params: {}
      }, ListPromptsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #8dcc91b9178c498b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/integration-tests/stateManagementStreamableHttp.test.ts:284

      const greetingResult = await client.request({
        method: 'tools/call',
        params: {
          name: 'greet',
          arguments: {
            name: 'Stateful Transport'
          }
        }
      }, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #6f44d02f82294afa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/integration-tests/taskResumability.test.ts:183

    const toolPromise = client1.request({
      method: 'tools/call',
      params: {
        name: 'run-notifications',
        arguments: {
          count: 3,
          interval: 10
        }
      }
    }, CallToolResultSchema, {
      resumptionToken: lastEventId,
      onresumptiontoken: onLastEventIdUpdate
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #bcf3051bd123ba72 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/integration-tests/taskResumability.test.ts:250

    await client2.request({
      method: 'tools/call',
      params: {
        name: 'run-notifications',
        arguments: {
          count: 1,
          interval: 5
        }
      }
    }, CallToolResultSchema, {
      resumptionToken: lastEventId,  // Pass the lastEventId from the previous session
      onresumptiontoken: onLastEventIdUpdate
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #aeb171ab3c37f22e — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/auth/providers/proxyProvider.test.ts:95

      const expectedUrl = new URL("https://auth.example.com/authorize");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #234482ed28c52bd9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/auth/providers/proxyProvider.ts:79

        const response = await fetch(revocationUrl, {
          method: "POST",
          headers: {
            "Content-Type": "application/x-www-form-urlencoded",
          },
          body: params.toString(),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4242e8f2227b8057 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/auth/providers/proxyProvider.ts:100

          const response = await fetch(registrationUrl, {
            method: "POST",
            headers: {
              "Content-Type": "application/json",
            },
            body: JSON.stringify(client),
          });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bd7eeeaa2217fb9d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/auth/providers/proxyProvider.ts:175

    const response = await fetch(this._endpoints.tokenUrl, {
      method: "POST",
      headers: {
        "Content-Type": "application/x-www-form-urlencoded",
      },
      body: params.toString(),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b231047050d55725 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/auth/providers/proxyProvider.ts:212

    const response = await fetch(this._endpoints.tokenUrl, {
      method: "POST",
      headers: {
        "Content-Type": "application/x-www-form-urlencoded",
      },
      body: params.toString(),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #85c9d39bf1517d80 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:144

        issuerUrl: new URL('http://auth.example.com')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #0c709552bd22a518 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:162

        issuerUrl: new URL('https://auth.example.com#fragment')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #5b06b75bb82f8238 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:171

        issuerUrl: new URL('https://auth.example.com?param=value')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #218be1aabac45aec — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:180

        issuerUrl: new URL('https://auth.example.com')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #edfa9ee907c33414 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:195

        issuerUrl: new URL('https://auth.example.com'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #332faf964251118f — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:196

        serviceDocumentationUrl: new URL('https://docs.example.com')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #8995e2355b628540 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:230

        issuerUrl: new URL('https://auth.example.com')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #203a44ce58889ccf — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:256

        issuerUrl: new URL('https://mcp.example.com'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #7404659971bc46a1 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:283

        issuerUrl: new URL('https://auth.example.com')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #c7993a44215f604d — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:362

        issuerUrl: new URL('https://auth.example.com')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #7e56ff7408422f44 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:403

        resourceServerUrl: new URL('https://api.example.com'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #d6ed9e0fc62961aa — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:417

        resourceServerUrl: new URL('https://api.example.com'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #de6f92a1ad23f746 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:418

        serviceDocumentationUrl: new URL('https://docs.example.com'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #c81e66adfb4c4f6f — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:459

        resourceServerUrl: new URL('https://api.example.com'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #3993be14d026cbf2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:138

    await client.request(
      {
        method: "tools/call",
        params: {
          name: "long-operation",
          arguments: { steps: 3 },
          _meta: {
            progressToken: "progress-test-1"
          }
        }
      },
      CallToolResultSchema,
      {
        onprogress: (progress) => {
          progressUpdates.push(progress);
        }
      }
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #c940019182ab0bf6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:257

    const result = await client.request(
      {
        method: "tools/list",
      },
      ListToolsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #eecde2534d8ccb82 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:341

    const result = await client.request(
      {
        method: "tools/call",
        params: {
          name: "test",
        },
      },
      CallToolResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #43c6fdd6e7986e11 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:420

    const listResult = await client.request(
      {
        method: "tools/list",
      },
      ListToolsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #abf6611a6bcd1943 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:435

    const callResult = await client.request(
      {
        method: "tools/call",
        params: {
          name: "test",
          arguments: {
            name: "test",
            value: 42,
          },
        },
      },
      CallToolResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #1b5d4d4bb6bcbda8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:577

    const result = await client.request(
      {
        method: "tools/list",
      },
      ListToolsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #a71906b6d3d272fa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:645

    const result = await client.request(
      {
        method: "tools/list",
      },
      ListToolsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #dc300b419ea77762 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:704

    const result = await client.request(
      {
        method: "tools/list",
      },
      ListToolsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #8b37c5867c472b01 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:759

    const result = await client.request(
      { method: "tools/list" },
      ListToolsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #100c022a013d0348 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:819

    const result = await client.request(
      { method: "tools/list" },
      ListToolsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #73f7f860afa1dbe1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:885

    const result = await client.request(
      { method: "tools/list" },
      ListToolsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #5cdefa3de16109ad — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:972

      client.request(
        {
          method: "tools/call",
          params: {
            name: "test",
            arguments: {
              name: "test",
              value: "not a number",
            },
          },
        },
        CallToolResultSchema,
      ),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #668bdadac1e5ca28 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:988

      client.request(
        {
          method: "tools/call",
          params: {
            name: "test (new api)",
            arguments: {
              name: "test",
              value: "not a number",
            },
          },
        },
        CallToolResultSchema,
      ),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #588472a8f9352e16 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1113

    const listResult = await client.request(
      {
        method: "tools/list",
      },
      ListToolsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #54a5cf86793e4201 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1132

    const result = await client.request(
      {
        method: "tools/call",
        params: {
          name: "test",
          arguments: {
            input: "hello",
          },
        },
      },
      CallToolResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #11baf3b2448d2132 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1345

    await client.request(
      {
        method: "tools/call",
        params: {
          name: "test-tool",
        },
      },
      CallToolResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #9afd46535cfb6ff8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1399

    const result = await client.request(
      {
        method: "tools/call",
        params: {
          name: "request-id-test",
        },
      },
      CallToolResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #e7e5a07349022f61 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1462

    await client.request(
      {
        method: "tools/call",
        params: {
          name: "test-tool",
        },
      },
      CallToolResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #6be91949104caa5e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1519

    const result = await client.request(
      {
        method: "tools/call",
        params: {
          name: "test",
          arguments: {
            input: "hello",
          },
        },
      },
      CallToolResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #99abfcc9529658db — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1573

    const result = await client.request(
      {
        method: "tools/call",
        params: {
          name: "error-test",
        },
      },
      CallToolResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #e91cf69ac933f5db — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1631

      client.request(
        {
          method: "tools/call",
          params: {
            name: "nonexistent-tool",
          },
        },
        CallToolResultSchema,
      ),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #e7e198c4bdbfcafa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1675

    const result = await client.request(
      {
        method: "resources/list",
      },
      ListResourcesResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #ee301f20d456f683 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1735

    const result = await client.request(
      {
        method: "resources/read",
        params: {
          uri: "test://resource",
        },
      },
      ReadResourceResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #a520efc601924d75 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1804

    const result = await client.request(
      {
        method: "resources/read",
        params: {
          uri: "test://resource/123",
        },
      },
      ReadResourceResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #e0653a82679d4f3d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1911

    let result = await client.request(
      { method: "resources/list" },
      ListResourcesResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #6429746805b790fd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1932

    result = await client.request(
      { method: "resources/list" },
      ListResourcesResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #4694b7da8c7e90bb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1980

    const result = await client.request(
      { method: "resources/templates/list" },
      ListResourceTemplatesResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #506fa4ed5f54fb44 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2000

    const result2 = await client.request(
      { method: "resources/templates/list" },
      ListResourceTemplatesResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #5936f483e78c8d85 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2046

    const result = await client.request(
      {
        method: "resources/list",
      },
      ListResourcesResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #ce7e6a74744098d0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2092

    const result = await client.request(
      {
        method: "resources/templates/list",
      },
      ListResourceTemplatesResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #aadd80229c56598d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2153

    const result = await client.request(
      {
        method: "resources/list",
      },
      ListResourcesResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #e708758c83ca6d1c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2203

    const result = await client.request(
      {
        method: "resources/read",
        params: {
          uri: "test://resource/books/123",
        },
      },
      ReadResourceResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #83b9100e50313799 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2340

      client.request(
        {
          method: "resources/read",
          params: {
            uri: "test://error",
          },
        },
        ReadResourceResultSchema,
      ),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #7027c5f33bb6d344 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2383

      client.request(
        {
          method: "resources/read",
          params: {
            uri: "test://nonexistent",
          },
        },
        ReadResourceResultSchema,
      ),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #b0ba2e3dfd739036 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2442

    const result = await client.request(
      {
        method: "completion/complete",
        params: {
          ref: {
            type: "ref/resource",
            uri: "test://resource/{category}",
          },
          argument: {
            name: "category",
            value: "",
          },
        },
      },
      CompleteResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #a30f8dcea05864ab — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2513

    const result = await client.request(
      {
        method: "completion/complete",
        params: {
          ref: {
            type: "ref/resource",
            uri: "test://resource/{category}",
          },
          argument: {
            name: "category",
            value: "m",
          },
        },
      },
      CompleteResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #4c23b50679a60a0b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2575

    const result = await client.request(
      {
        method: "resources/read",
        params: {
          uri: "test://resource",
        },
      },
      ReadResourceResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #383b25b5ba19eab1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2625

    const result = await client.request(
      {
        method: "prompts/list",
      },
      ListPromptsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #8137c5c5193caadb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2690

    const result = await client.request(
      {
        method: "prompts/get",
        params: {
          name: "test",
        },
      },
      GetPromptResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #2ac7f45f00e8b7f9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2771

    const listResult = await client.request(
      {
        method: "prompts/list",
      },
      ListPromptsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #4d4d4ddb1a8cbaa7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2782

    const getResult = await client.request(
      {
        method: "prompts/get",
        params: {
          name: "test",
          arguments: {
            name: "test",
            value: "value",
          },
        },
      },
      GetPromptResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #b8cd9cbbeae7731e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2915

    let result = await client.request(
      { method: "prompts/list" },
      ListPromptsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #caa995e9183a0475 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2937

    result = await client.request(
      { method: "prompts/list" },
      ListPromptsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #54c38d744c07f252 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2986

    const result = await client.request(
      {
        method: "prompts/list",
      },
      ListPromptsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #440cea5da137a6b5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:3034

    const result = await client.request(
      {
        method: "prompts/list",
      },
      ListPromptsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #bebd03efc2ac51a5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:3095

      client.request(
        {
          method: "prompts/get",
          params: {
            name: "test",
            arguments: {
              name: "test",
              value: "ab", // Too short
            },
          },
        },
        GetPromptResultSchema,
      ),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #cb34b6b2bcd230b2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:3294

      client.request(
        {
          method: "prompts/get",
          params: {
            name: "nonexistent-prompt",
          },
        },
        GetPromptResultSchema,
      ),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #40dcd06a2b890c05 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:3353

    const result = await client.request(
      {
        method: "completion/complete",
        params: {
          ref: {
            type: "ref/prompt",
            name: "test-prompt",
          },
          argument: {
            name: "name",
            value: "",
          },
        },
      },
      CompleteResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #23cd489cff5d5c61 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:3423

    const result = await client.request(
      {
        method: "completion/complete",
        params: {
          ref: {
            type: "ref/prompt",
            name: "test-prompt",
          },
          argument: {
            name: "name",
            value: "A",
          },
        },
      },
      CompleteResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #3310b3201f01207b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:3488

    const result = await client.request(
      {
        method: "prompts/get",
        params: {
          name: "request-id-test",
        },
      },
      GetPromptResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #1e608bd85ff9cbf7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/streamableHttp.test.ts:190

  return fetch(baseUrl, {
    method: "POST",
    headers,
    body: JSON.stringify(message),
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #e427be02acc1f84a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/streamableHttp.test.ts:374

    const sseResponse = await fetch(baseUrl, {
      method: "GET",
      headers: {
        Accept: "text/event-stream",
        "mcp-session-id": sessionId,
      },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #3ab50ce5018a0e0e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/streamableHttp.test.ts:415

    const sseResponse = await fetch(baseUrl, {
      method: "GET",
      headers: {
        Accept: "text/event-stream",
        "mcp-session-id": sessionId,
      },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #78f16ae5a746e9ab — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/streamableHttp.test.ts:446

    const firstStream = await fetch(baseUrl, {
      method: "GET",
      headers: {
        Accept: "text/event-stream",
        "mcp-session-id": sessionId,
      },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #22fb993905178d8b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/streamableHttp.test.ts:457

    const secondStream = await fetch(baseUrl, {
      method: "GET",
      headers: {
        Accept: "text/event-stream",
        "mcp-session-id": sessionId,
      },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #8e6572efc149aea8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/streamableHttp.test.ts:475

    const response = await fetch(baseUrl, {
      method: "GET",
      headers: {
        Accept: "application/json",
        "mcp-session-id": sessionId,
      },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #bc3e15c850be2184 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/streamableHttp.test.ts:492

    const response = await fetch(baseUrl, {
      method: "POST",
      headers: {
        "Content-Type": "application/json",
        Accept: "application/json",  // Missing text/event-stream
        "mcp-session-id": sessionId,
      },
      body: JSON.stringify(TEST_MESSAGES.toolsList),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #86aec0da3b830391 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/streamableHttp.test.ts:511

    const response = await fetch(baseUrl, {
      method: "POST",
      headers: {
        "Content-Type": "text/plain",
        Accept: "application/json, text/event-stream",
        "mcp-session-id": sessionId,
      },
      body: "This is plain text",
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #0c829e21e6047497 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/streamableHttp.test.ts:569

    const response = await fetch(baseUrl, {
      method: "POST",
      headers: {
        "Content-Type": "application/json",
        Accept: "application/json, text/event-stream",
        "mcp-session-id": sessionId,
      },
      body: "This is not valid JSON",
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #ff1ccb5edb088da6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/streamableHttp.test.ts:668

    const sseResponse = await fetch(baseUrl, {
      method: "GET",
      headers: {
        Accept: "text/event-stream",
        "mcp-session-id": sessionId,
      },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #efa2493fdaa084c6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/streamableHttp.test.ts:706

    const deleteResponse = await fetch(tempUrl, {
      method: "DELETE",
      headers: { "mcp-session-id": tempSessionId || "" },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #2762044893da0f01 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/streamableHttp.test.ts:722

    const response = await fetch(baseUrl, {
      method: "DELETE",
      headers: { "mcp-session-id": "invalid-session-id" },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #ca6d7a7620948580 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/streamableHttp.test.ts:970

    const response = await fetch(baseUrl, {
      method: "POST",
      headers: {
        "Content-Type": "application/json",
        Accept: "application/json, text/event-stream",
        "mcp-session-id": sessionId,
      },
      // Empty body - we're testing pre-parsed body
      body: ""
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #1b1c9ddd1a1e94db — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/streamableHttp.test.ts:999

    const response = await fetch(baseUrl, {
      method: "POST",
      headers: {
        "Content-Type": "application/json",
        Accept: "application/json, text/event-stream",
        "mcp-session-id": sessionId,
      },
      body: "" // Empty as we're using pre-parsed
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #cfd6e32dbf8d0359 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/streamableHttp.test.ts:1029

    const response = await fetch(baseUrl, {
      method: "POST",
      headers: {
        "Content-Type": "application/json",
        Accept: "application/json, text/event-stream",
        "mcp-session-id": sessionId,
      },
      body: JSON.stringify({
        jsonrpc: "2.0",
        method: "tools/call",
        params: { name: "greet", arguments: { name: "Ignored" } },
        id: "ignored-id"
      })
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #91e55d97064512a9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/streamableHttp.test.ts:1118

    const sseResponse = await fetch(baseUrl, {
      method: "GET",
      headers: {
        Accept: "text/event-stream",
        "mcp-session-id": sessionId,
      },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #3b74b3974721f5d4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/streamableHttp.test.ts:1163

    const sseResponse = await fetch(baseUrl, {
      method: "GET",
      headers: {
        Accept: "text/event-stream",
        "mcp-session-id": sessionId,
      },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #b740f5b1ecfb9561 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/streamableHttp.test.ts:1194

    const reconnectResponse = await fetch(baseUrl, {
      method: "GET",
      headers: {
        Accept: "text/event-stream",
        "mcp-session-id": sessionId,
        "last-event-id": firstEventId
      },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #3db792728b269931 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/streamableHttp.test.ts:1251

    const response1 = await fetch(baseUrl, {
      method: "POST",
      headers: {
        "Content-Type": "application/json",
        Accept: "application/json, text/event-stream",
        "mcp-session-id": "random-id-1",
      },
      body: JSON.stringify({ jsonrpc: "2.0", method: "tools/list", params: {}, id: "t1" }),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #bcd3b695f41cd8c8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/streamableHttp.test.ts:1263

    const response2 = await fetch(baseUrl, {
      method: "POST",
      headers: {
        "Content-Type": "application/json",
        Accept: "application/json, text/event-stream",
        "mcp-session-id": "different-id-2",
      },
      body: JSON.stringify({ jsonrpc: "2.0", method: "tools/list", params: {}, id: "t2" }),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #a17bbf631b744e4a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/streamableHttp.test.ts:1283

    const stream1 = await fetch(baseUrl, {
      method: "GET",
      headers: { Accept: "text/event-stream" },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #86d766026968b1ba — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/server/streamableHttp.test.ts:1290

    const stream2 = await fetch(baseUrl, {
      method: "GET",
      headers: { Accept: "text/event-stream" },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@qdrant/js-client-rest

npm dependency

expand_more 6 low-confidence finding(s)

low env_fs tooling Excluded from app score unknown #94416a57cba52fd2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/rollup.config.js:5

import {writeFile} from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c59c4970abfeb915 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/rollup.config.js:9

    buildEnd: () => writeFile('dist/cjs/package.json', '{"type":"commonjs"}'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #09f8ca19d281e871 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generate_client_construction.ts:1

import * as fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9cc8ea4f9bbefe14 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generate_client_construction.ts:3

const openapiFile = fs.readFileSync('./src/openapi/generated_schema.ts', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4771fa2aa95d62e5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generate_client_construction.ts:341

fs.writeFileSync('./src/openapi/generated_client_type.ts', generatedTypeFile);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b23a8a88bd3a75f7 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generate_client_construction.ts:387

fs.writeFileSync('./src/openapi/generated_api_client.ts', generatedConstructorFile);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@tanstack/react-query

npm dependency

expand_more 5 low-confidence finding(s)

low env_fs dependency Excluded from app score #5b9e784b1cae56ea — Environment-variable access.

pkgs/npm/@[email protected]/src/useBaseQuery.ts:44

  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ceee9b0962e4ef8c — Environment-variable access.

pkgs/npm/@[email protected]/src/useBaseQuery.ts:69

  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5eff0acef3ac6248 — Environment-variable access.

pkgs/npm/@[email protected]/src/useSuspenseInfiniteQuery.ts:34

  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cabac0789ee9a461 — Environment-variable access.

pkgs/npm/@[email protected]/src/useSuspenseQueries.ts:194

        if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e68b8be6053464d0 — Environment-variable access.

pkgs/npm/@[email protected]/src/useSuspenseQuery.ts:17

  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@vscode/codicons

npm dependency

expand_more 20 low-confidence finding(s)

low env_fs tooling Excluded from app score unknown #6fde440a918c20fb — Filesystem access.

pkgs/npm/@[email protected]/scripts/check-metadata.js:8

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5944363c24c0e7d3 — Filesystem access.

pkgs/npm/@[email protected]/scripts/check-metadata.js:25

const mapping = JSON.parse(fs.readFileSync(mappingPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ef69b7515c9742b4 — Filesystem access.

pkgs/npm/@[email protected]/scripts/check-metadata.js:26

const metadata = JSON.parse(fs.readFileSync(metadataPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cc963aa486d93f7a — Filesystem access.

pkgs/npm/@[email protected]/scripts/embed-metadata.js:1

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8f7c8386de611d1e — Filesystem access.

pkgs/npm/@[email protected]/scripts/embed-metadata.js:12

const metadata = fs.readFileSync(metadataPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a035671ab511186e — Filesystem access.

pkgs/npm/@[email protected]/scripts/embed-metadata.js:13

let html = fs.readFileSync(htmlPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0bf2aedafba6d189 — Filesystem access.

pkgs/npm/@[email protected]/scripts/embed-metadata.js:21

    fs.writeFileSync(htmlPath, html);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #782bde28228886ad — Filesystem access.

pkgs/npm/@[email protected]/scripts/embed-svg-data.js:1

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7b8bab00267a407f — Filesystem access.

pkgs/npm/@[email protected]/scripts/embed-svg-data.js:18

    const content = fs.readFileSync(path.join(iconsDir, file), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bd42c6c160111603 — Filesystem access.

pkgs/npm/@[email protected]/scripts/embed-svg-data.js:22

let html = fs.readFileSync(htmlPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1e3f42dd2f2f9303 — Filesystem access.

pkgs/npm/@[email protected]/scripts/embed-svg-data.js:27

    fs.writeFileSync(htmlPath, html);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e055edc095ca6656 — Filesystem access.

pkgs/npm/@[email protected]/scripts/export-to-ts.js:1

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7383d95826a50418 — Filesystem access.

pkgs/npm/@[email protected]/scripts/export-to-ts.js:10

fs.readFile(opts.f, 'utf8', (err, data) => {
    if (err) {
        console.error('Error reading file:', err);
        return;
    }

    try {
        const mapping = JSON.parse(data);

        console.log("/*---------------------------------------------------------------------------------------------");
        console.log(" *  Copyright (c) Microsoft Corporation. All rights reserved.");
        console.log(" *  Licensed under the MIT License. See License.txt in the project root for license information.");
        console.log(" *--------------------------------------------------------------------------------------------*/");
        console.log("import { register } from './codiconsUtil.js';");
        console.log("");
        console.log("");
        console.log("// This file is automatically generated by (microsoft/vscode-codicons)/scripts/export-to-ts.js");
        console.log("// Please don't edit it, as your changes will be overwritten.");
        console.log("// Instead, add mappings to codiconsDerived in codicons.ts.");
        console.log("export const codiconsLibrary = {");

        // New format: mapping is { "code": ["alias1", "alias2", ...] }
        Object.entries(mapping).forEach(([code, aliases]) => {
            const codeValue = parseInt(code);
            const hexValue = decimalToHex(codeValue);
            
            // Register each alias with the same code
            aliases.forEach((name) => {
                console.log(`\t${toCamelCase(name)}: register('${name}', ${hexValue}),`);
            });
        });

        console.log("} as const;");

    } catch (error) {
        console.error('Error parsing JSON:', error);
    }
});

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1fc0d54c6f78a722 — Filesystem access.

pkgs/npm/@[email protected]/scripts/reset.js:1

const fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1a4b0ddbe5c4cc33 — Filesystem access.

pkgs/npm/@[email protected]/scripts/svg-sprite.js:3

const fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5c5cb559315f2c60 — Filesystem access.

pkgs/npm/@[email protected]/scripts/svg-sprite.js:90

        fs.readFileSync(file, "utf-8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a6e26c6c7e8d30ea — Filesystem access.

pkgs/npm/@[email protected]/scripts/svg-sprite.js:118

    fs.writeFileSync(result.symbol.sprite.path, result.symbol.sprite.contents);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #23090e6e37ba4a21 — Filesystem access.

pkgs/npm/@[email protected]/scripts/version-bump.js:3

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #77dca6ed5afeae71 — Filesystem access.

pkgs/npm/@[email protected]/scripts/version-bump.js:13

  const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4cac87571d552e75 — Filesystem access.

pkgs/npm/@[email protected]/scripts/version-bump.js:84

  fs.writeFileSync(packageJsonPath, JSON.stringify(packageJson, null, 2) + '\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

ai-sdk-provider-poe

npm dependency

expand_more 21 low-confidence finding(s)

low env_fs tooling Excluded from app score unknown #be9c30be2c807f73 — Filesystem access.

pkgs/npm/[email protected]__reposrc/scripts/build.ts:2

import { readFileSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d30a21edefaf6beb — Filesystem access.

pkgs/npm/[email protected]__reposrc/scripts/build.ts:5

const pkg = JSON.parse(readFileSync("package.json", "utf-8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #55709c3bea376eef — Filesystem access.

pkgs/npm/[email protected]__reposrc/scripts/dev-models.ts:90

    readFileSync(new URL("../src/data/bundled-routing.json", import.meta.url), "utf8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2a8eaef59d6c548c — Environment-variable access.

pkgs/npm/[email protected]__reposrc/scripts/dev-models.ts:999

  port = Number(process.env.PORT ?? 3456),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9d1336ce8e4e1cc4 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/scripts/probe-workarounds.ts:14

const apiKey = process.env.POE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5fa4add425b8c374 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/scripts/probe-workarounds.ts:20

const baseURL = process.env.POE_BASE_URL ?? "https://api.poe.com/v1";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f32af95bd59f08f9 — Filesystem access.

pkgs/npm/[email protected]__reposrc/scripts/publish.ts:2

import { readFileSync, writeFileSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cf9b0a3c8142fc3d — Filesystem access.

pkgs/npm/[email protected]__reposrc/scripts/publish.ts:10

const originalPkg = readFileSync("package.json", "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #46ec46eb35fe3b82 — Filesystem access.

pkgs/npm/[email protected]__reposrc/scripts/publish.ts:16

  writeFileSync("package.json", JSON.stringify(pkg, null, 2) + "\n");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #358ca843a9d5c915 — Filesystem access.

pkgs/npm/[email protected]__reposrc/scripts/publish.ts:20

  writeFileSync("package.json", originalPkg);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #77d29b983f12c439 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/scripts/snapshots.ts:13

  return process.env.POE_SNAPSHOT_DIR?.trim() || ".snapshots";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #df4bd346b867b5c0 — Filesystem access.

pkgs/npm/[email protected]__reposrc/scripts/snapshots.ts:29

  const raw = await fs.readFile(accessedKeysPath, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #739e0fc2fe14d1b1 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]__reposrc/scripts/update-bundled-routing.ts:15

const res = await fetch(API_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #21caf7a18f8c8f5a — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]__reposrc/src/middlewares/patch-output-text.test.ts:35

    const res = await fetch("https://api.poe.com/v1/responses", {});

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #eaa3e4123f3b71bb — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]__reposrc/src/middlewares/patch-output-text.test.ts:49

    const res = await fetch("https://api.poe.com/v1/responses", {});

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #a79837065b6850f9 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]__reposrc/src/middlewares/patch-output-text.test.ts:67

    const res = await fetch("https://api.poe.com/v1/responses", {});

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #345c13a6d12f8b3b — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]__reposrc/src/middlewares/patch-output-text.test.ts:77

    const res = await fetch("https://api.poe.com/v1/chat/completions", {});

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #35152200d4ccc0d9 — Filesystem access.

pkgs/npm/[email protected]__reposrc/src/poe-provider.openai.integration.test.ts:4

import { readFileSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #22eb32777eefbd80 — Filesystem access.

pkgs/npm/[email protected]__reposrc/src/poe-provider.openai.integration.test.ts:10

const bannerImage = readFileSync(
  new URL("./test/fixtures/banner.jpg", import.meta.url)
);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #f6224ece7da4fef9 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]__reposrc/src/poe-provider.openai.integration.test.ts:254

              image: new URL(
                "https://raw.githubusercontent.com/poe-platform/ai-sdk-provider-poe/refs/heads/main/tests/fixtures/banner.jpg"
              ),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #eb0936fd5b04cdd6 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/vitest.config.ts:4

const isRecordMode = process.env.POE_SNAPSHOT_MODE === "record" || cliTags.includes("snapshot:record");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

chokidar

npm dependency

expand_more 2 low-confidence finding(s)

low env_fs dependency Excluded from app score #98387d2ce52d8af7 — Environment-variable access.

pkgs/npm/[email protected]/index.js:284

        const envPoll = process.env.CHOKIDAR_USEPOLLING;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #284bef1e861b1d6d — Environment-variable access.

pkgs/npm/[email protected]/index.js:294

        const envInterval = process.env.CHOKIDAR_INTERVAL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

exceljs

npm dependency

expand_more 6 low-confidence finding(s)

low env_fs dependency Excluded from app score #2400204e02b107e6 — Filesystem access.

pkgs/npm/[email protected]/lib/csv/csv.js:1

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d514c4755af8427b — Filesystem access.

pkgs/npm/[email protected]/lib/stream/xlsx/workbook-reader.js:1

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a019859a43ba8092 — Filesystem access.

pkgs/npm/[email protected]/lib/stream/xlsx/workbook-writer.js:1

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32aa2cbf8e528b0b — Filesystem access.

pkgs/npm/[email protected]/lib/utils/utils.js:1

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #794af77a517e07d8 — Filesystem access.

pkgs/npm/[email protected]/lib/xlsx/xlsx.js:1

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95f8dc3ec419df6a — Filesystem access.

pkgs/npm/[email protected]/lib/xlsx/xlsx.js:29

    fs.readFile(filename, options, (error, data) => {
      if (error) {
        reject(error);
      } else {
        resolve(data);
      }
    });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

fast-xml-parser

npm dependency

expand_more 6 low-confidence finding(s)

low env_fs dependency Excluded from app score #9aefb96e0aef13a2 — Filesystem access.

pkgs/npm/[email protected]/src/cli/cli.js:4

import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f7eb808e90b4ec8a — Filesystem access.

pkgs/npm/[email protected]/src/cli/cli.js:18

  const version = JSON.parse(fs.readFileSync(packageJsonPath).toString()).version;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cfc4c5c19ea73c37 — Filesystem access.

pkgs/npm/[email protected]/src/cli/cli.js:78

      fs.readFile(fileName, function(err, data) {
        if (err) {
          throw err;
        }
        callback(data.toString());
      });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #79195a26a1edd1d9 — Filesystem access.

pkgs/npm/[email protected]/src/cli/cli.js:91

  fs.writeFile(fileName, data, function(err) {
    if (err) {
      throw err;
    }
    console.log('JSON output has been written to ' + fileName);
  });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #acd13f780b062145 — Filesystem access.

pkgs/npm/[email protected]/src/cli/man.js:1

import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #99949a4d4b7c8e27 — Filesystem access.

pkgs/npm/[email protected]/src/cli/man.js:4

const version = JSON.parse(fs.readFileSync(packageJsonPath).toString()).version;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

fastest-levenshtein

npm dependency

expand_more 3 low-confidence finding(s)

low env_fs dependency Excluded from app score #a1225df9668909db — Filesystem access.

pkgs/npm/[email protected]/bench.js:8

var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f5430580f158649 — Filesystem access.

pkgs/npm/[email protected]/bench.js:43

    fs.writeFileSync("data.json", JSON.stringify(data_1));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d771da70ebc3555 — Filesystem access.

pkgs/npm/[email protected]/bench.js:45

var data = JSON.parse(fs.readFileSync("data.json", "utf8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

global-agent

npm dependency

expand_more 27 low-confidence finding(s)

low env_fs dependency Excluded from app score #e88c2b3fd4fa3019 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/classes/Agent.ts:112

    const rejectUnauthorized = process.env.NODE_TLS_REJECT_UNAUTHORIZED;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a1d0a1f3c22c630d — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:62

const defaultNodeTlsRejectUnauthorized = process.env.NODE_TLS_REJECT_UNAUTHORIZED;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9b147abe04e79b81 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:136

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = defaultNodeTlsRejectUnauthorized;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9be34cc45ee34993 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:343

  process.env.GLOBAL_AGENT_FORCE_GLOBAL_AGENT = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #92ce62e77de0717b — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:359

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = 'null';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #547f12f2a56be4af — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:371

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = 1;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3455d4834da2eebf — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:385

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = 0;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e743fb547a00a871 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:399

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = true;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #17bb0e6c7cdc7f86 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:411

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = false;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1f6de682dba9321f — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:422

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = 'yes';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #34aeb4839dd7e6ec — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:433

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = 'no';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1019f35b575bc9df — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:461

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8e11448328269d65 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:480

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #53782525ef96c68d — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:499

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #74a19b9d4b1954a8 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:518

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #41f624ebeb716aad — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:538

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f84749016a7045ad — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:554

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2d1cf3f9828a62a0 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:586

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #aaafe429d7e4dfe1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:625

    http.get(httpServer.url, createHttpResponseResolver(resolve));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #55f7baeadb248c03 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:646

    http.get({
      path: '/endpoint',
      socketPath: '/tmp/test.sock',
    }, createHttpResponseResolver(resolve));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #d853498cb87f29ba — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:665

    http.get({
      host: '127.0.0.1',
    }, createHttpResponseResolver(resolve));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #da065d2d85e0350f — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:687

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d2aed2573dd20a03 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:713

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c9beddad4dcc00b6 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:745

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f21f3258d676a76 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.ts:70

  proxyController.HTTP_PROXY = process.env[configuration.environmentVariableNamespace + 'HTTP_PROXY'] ?? null;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc66ded4786db949 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.ts:73

  proxyController.HTTPS_PROXY = process.env[configuration.environmentVariableNamespace + 'HTTPS_PROXY'] ?? null;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36dd7ace8b3f08dc — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.ts:76

  proxyController.NO_PROXY = process.env[configuration.environmentVariableNamespace + 'NO_PROXY'] ?? null;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

gray-matter

npm dependency

expand_more 2 low-confidence finding(s)

low env_fs dependency Excluded from app score #1602529fe0cb1c7c — Filesystem access.

pkgs/npm/[email protected]/index.js:3

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #676558ab240fb884 — Filesystem access.

pkgs/npm/[email protected]/index.js:179

  const str = fs.readFileSync(filepath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

mammoth

npm dependency

expand_more 3 low-confidence finding(s)

low env_fs dependency Excluded from app score #9cb7fcf1304bc485 — Filesystem access.

pkgs/npm/[email protected]/lib/docx/files.js:1

var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f165172bd6048a27 — Filesystem access.

pkgs/npm/[email protected]/lib/main.js:3

var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d4fb4443217657ee — Filesystem access.

pkgs/npm/[email protected]/lib/unzip.js:1

var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

monaco-vscode-textmate-theme-converter

npm dependency

expand_more 12 low-confidence finding(s)

low env_fs dependency Excluded from app score #6538facf438395f6 — Filesystem access.

pkgs/npm/[email protected]/lib/cjs/index.js:14

    var themeFile = fs.readFileSync(inputFilePath).toString();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ffca2d4a54d1c78 — Filesystem access.

pkgs/npm/[email protected]/lib/cjs/index.js:19

    fs.writeFileSync(outputFilePath, JSON.stringify(convertedTheme, null, 4));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ddb6214b6503e1aa — Filesystem access.

pkgs/npm/[email protected]/lib/cjs/index.js:36

                    return [4 /*yield*/, fs.readFile(filePath)];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d3549b8844ca1635 — Filesystem access.

pkgs/npm/[email protected]/lib/cjs/index.js:43

                    return [4 /*yield*/, fs.writeFile(path.join(outDir, fileName), JSON.stringify(out))];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e0b81c1e4438a9bd — Filesystem access.

pkgs/npm/[email protected]/lib/umd/index.js:23

        var themeFile = fs.readFileSync(inputFilePath).toString();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49229e48a601fbbe — Filesystem access.

pkgs/npm/[email protected]/lib/umd/index.js:28

        fs.writeFileSync(outputFilePath, JSON.stringify(convertedTheme, null, 4));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #94ce2d1e52392fb7 — Filesystem access.

pkgs/npm/[email protected]/lib/umd/index.js:45

                        return [4 /*yield*/, fs.readFile(filePath)];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67d4ddd62605f0a2 — Filesystem access.

pkgs/npm/[email protected]/lib/umd/index.js:52

                        return [4 /*yield*/, fs.writeFile(path.join(outDir, fileName), JSON.stringify(out))];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eee707f5e694b368 — Filesystem access.

pkgs/npm/[email protected]/src/index.ts:15

    let themeFile = fs.readFileSync(inputFilePath).toString();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e26f6a78be3f5aed — Filesystem access.

pkgs/npm/[email protected]/src/index.ts:20

    fs.writeFileSync(outputFilePath, JSON.stringify(convertedTheme, null, 4));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8eab27a3980f22f — Filesystem access.

pkgs/npm/[email protected]/src/index.ts:31

            let themeFile: string = (await fs.readFile(filePath)).toString();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #265519e0dced6d0b — Filesystem access.

pkgs/npm/[email protected]/src/index.ts:36

            await fs.writeFile(path.join(outDir, fileName), JSON.stringify(out));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

node-ipc

npm dependency

expand_more 24 low-confidence finding(s)

low env_fs dependency Excluded from app score #3eff60770b4d8f1d — Filesystem access.

pkgs/npm/[email protected]/dao/client.js:5

import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #79c586db8f576081 — Filesystem access.

pkgs/npm/[email protected]/dao/client.js:116

                client.config.tls.key=fs.readFileSync(client.config.tls.private);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9bd2ca5da12402e3 — Filesystem access.

pkgs/npm/[email protected]/dao/client.js:119

                client.config.tls.cert=fs.readFileSync(client.config.tls.public);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c5a34ff0cfbd9e7a — Filesystem access.

pkgs/npm/[email protected]/dao/client.js:128

                        fs.readFileSync(client.config.tls.trustedConnections[i])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f0dbf371d3d5b33 — Filesystem access.

pkgs/npm/[email protected]/dao/socketServer.js:4

import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a60da6243fb72c3d — Filesystem access.

pkgs/npm/[email protected]/dao/socketServer.js:345

        this.config.tls.key=fs.readFileSync(this.config.tls.private);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d20748140dad4a6 — Filesystem access.

pkgs/npm/[email protected]/dao/socketServer.js:347

        this.config.tls.key=fs.readFileSync(`${__dirname}/../local-node-ipc-certs/private/server.key`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #93ed0f0082ff33a3 — Filesystem access.

pkgs/npm/[email protected]/dao/socketServer.js:350

        this.config.tls.cert=fs.readFileSync(this.config.tls.public);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #de5611279fa24774 — Filesystem access.

pkgs/npm/[email protected]/dao/socketServer.js:352

        this.config.tls.cert=fs.readFileSync(`${__dirname}/../local-node-ipc-certs/server.pub`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4136d3787d0f39f2 — Filesystem access.

pkgs/npm/[email protected]/dao/socketServer.js:355

        this.config.tls.dhparam=fs.readFileSync(this.config.tls.dhparam);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7b7abbf2b8574ce — Filesystem access.

pkgs/npm/[email protected]/dao/socketServer.js:364

                fs.readFileSync(this.config.tls.trustedConnections[i])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f3f0e23b68dd5a2e — Filesystem access.

pkgs/npm/[email protected]/lcov.js:2

import {writeFileSync} from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d87a8b65f4ee414c — Filesystem access.

pkgs/npm/[email protected]/lcov.js:8

        writeFileSync('./coverage/lcov.svg', svgBadge);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #573aa9c6e5068aec — Filesystem access.

pkgs/npm/[email protected]/node-ipc.cjs:265

var import_fs = __toModule(require("fs"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6503b92e3177d98 — Filesystem access.

pkgs/npm/[email protected]/node-ipc.cjs:702

        client.config.tls.key = import_fs.default.readFileSync(client.config.tls.private);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f3eead28d006f74 — Filesystem access.

pkgs/npm/[email protected]/node-ipc.cjs:705

        client.config.tls.cert = import_fs.default.readFileSync(client.config.tls.public);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #893b1064bf6161f5 — Filesystem access.

pkgs/npm/[email protected]/node-ipc.cjs:713

          client.config.tls.ca.push(import_fs.default.readFileSync(client.config.tls.trustedConnections[i]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b580e42e8041cbbe — Filesystem access.

pkgs/npm/[email protected]/node-ipc.cjs:786

var import_fs2 = __toModule(require("fs"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f05d08691ab7bec — Filesystem access.

pkgs/npm/[email protected]/node-ipc.cjs:998

    this.config.tls.key = import_fs2.default.readFileSync(this.config.tls.private);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8985a1bf37c93c3c — Filesystem access.

pkgs/npm/[email protected]/node-ipc.cjs:1000

    this.config.tls.key = import_fs2.default.readFileSync(`${__dirname}/../local-node-ipc-certs/private/server.key`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e3c919d948d02e1 — Filesystem access.

pkgs/npm/[email protected]/node-ipc.cjs:1003

    this.config.tls.cert = import_fs2.default.readFileSync(this.config.tls.public);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #42e085d7da5256cb — Filesystem access.

pkgs/npm/[email protected]/node-ipc.cjs:1005

    this.config.tls.cert = import_fs2.default.readFileSync(`${__dirname}/../local-node-ipc-certs/server.pub`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #87ce66084d9c2878 — Filesystem access.

pkgs/npm/[email protected]/node-ipc.cjs:1008

    this.config.tls.dhparam = import_fs2.default.readFileSync(this.config.tls.dhparam);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3460472d43c89a77 — Filesystem access.

pkgs/npm/[email protected]/node-ipc.cjs:1016

      this.config.tls.ca.push(import_fs2.default.readFileSync(this.config.tls.trustedConnections[i]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

ollama

npm dependency

expand_more 2 low-confidence finding(s)

low env_fs dependency Excluded from app score #e860e0beba0fe8f0 — Filesystem access.

pkgs/npm/[email protected]/src/index.ts:18

        const fileBuffer = await promises.readFile(resolve(image))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #03ba318963aecdea — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/utils.ts:203

  return fetch(url, options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

openai

npm dependency

expand_more 363 low-confidence finding(s)

low egress dependency Excluded from app score #e3765ab316a81eb0 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/auth/subject-token-providers.js:50

            const url = new URL(AZURE_IMDS_BASE_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #99524c80b7e27740 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/auth/subject-token-providers.js:97

            const url = new URL(`http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/identity`);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0dd9ceb9232c511b — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/auth/subject-token-providers.mjs:44

            const url = new URL(AZURE_IMDS_BASE_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3518b75adbccbbe1 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/auth/subject-token-providers.mjs:91

            const url = new URL(`http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/identity`);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #96b6571228fffb48 — Environment-variable access.

pkgs/npm/[email protected]/azure.js:44

                endpoint = process.env['AZURE_OPENAI_ENDPOINT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f9d18dd2c146e6d — Environment-variable access.

pkgs/npm/[email protected]/azure.mjs:40

                endpoint = process.env['AZURE_OPENAI_ENDPOINT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #7e5a44a2cf5e2365 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/admin-api-keys.js:39

        return this._client.get((0, path_1.path) `/organization/admin_api_keys/${keyID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a7756cc95396b248 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/admin-api-keys.mjs:36

        return this._client.get(path `/organization/admin_api_keys/${keyID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fdcc763d59286fe8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/certificates.js:44

        return this._client.get((0, path_1.path) `/organization/certificates/${certificateID}`, {
            query,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ed68c74ebab41395 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/certificates.js:62

        return this._client.post((0, path_1.path) `/organization/certificates/${certificateID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f4f8bc5a6e9f3621 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/certificates.mjs:41

        return this._client.get(path `/organization/certificates/${certificateID}`, {
            query,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3ac8032af503b3c3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/certificates.mjs:59

        return this._client.post(path `/organization/certificates/${certificateID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #091c19d6945a93d6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/groups/groups.js:48

        return this._client.get((0, path_1.path) `/organization/groups/${groupID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a6be9ec91cf7d851 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/groups/groups.js:65

        return this._client.post((0, path_1.path) `/organization/groups/${groupID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7c74e9f0944cbc58 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/groups/groups.mjs:44

        return this._client.get(path `/organization/groups/${groupID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7df35ae774c00509 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/groups/groups.mjs:61

        return this._client.post(path `/organization/groups/${groupID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #97e7993f8d666435 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/groups/roles.js:22

        return this._client.post((0, path_1.path) `/organization/groups/${groupID}/roles`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f2e83c002677aa65 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/groups/roles.js:42

        return this._client.get((0, path_1.path) `/organization/groups/${group_id}/roles/${roleID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cbbea11783631794 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/groups/roles.mjs:19

        return this._client.post(path `/organization/groups/${groupID}/roles`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a7e96ff2269025e0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/groups/roles.mjs:39

        return this._client.get(path `/organization/groups/${group_id}/roles/${roleID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f1c8e7c5a8426b9b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/groups/users.js:22

        return this._client.post((0, path_1.path) `/organization/groups/${groupID}/users`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d2eec37382f802e7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/groups/users.js:42

        return this._client.get((0, path_1.path) `/organization/groups/${group_id}/users/${userID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9eef5dbdc00659f1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/groups/users.mjs:19

        return this._client.post(path `/organization/groups/${groupID}/users`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a9fb1a79646668b3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/groups/users.mjs:39

        return this._client.get(path `/organization/groups/${group_id}/users/${userID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2a81499201afbbc1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/invites.js:41

        return this._client.get((0, path_1.path) `/organization/invites/${inviteID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fdaa36a451261d4c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/invites.mjs:38

        return this._client.get(path `/organization/invites/${inviteID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #05b18809548e1f80 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/api-keys.js:23

        return this._client.get((0, path_1.path) `/organization/projects/${project_id}/api_keys/${apiKeyID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0087d0438930b3bc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/api-keys.mjs:20

        return this._client.get(path `/organization/projects/${project_id}/api_keys/${apiKeyID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #47fcd35f49f000fd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/data-retention.js:20

        return this._client.get((0, path_1.path) `/organization/projects/${projectID}/data_retention`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #555667e1c66dee92 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/data-retention.js:38

        return this._client.post((0, path_1.path) `/organization/projects/${projectID}/data_retention`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #01fd7903447a37c2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/data-retention.mjs:17

        return this._client.get(path `/organization/projects/${projectID}/data_retention`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #35e4686a3fbbc898 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/data-retention.mjs:35

        return this._client.post(path `/organization/projects/${projectID}/data_retention`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #369ed9125b4a3f01 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/groups/groups.js:29

        return this._client.post((0, path_1.path) `/organization/projects/${projectID}/groups`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #18c6bc453d2b6de0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/groups/groups.js:49

        return this._client.get((0, path_1.path) `/organization/projects/${project_id}/groups/${groupID}`, {
            query,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7cd533e368abf3ac — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/groups/groups.mjs:25

        return this._client.post(path `/organization/projects/${projectID}/groups`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #045a85da6a6f0573 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/groups/groups.mjs:45

        return this._client.get(path `/organization/projects/${project_id}/groups/${groupID}`, {
            query,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ae7874d10402d9da — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/groups/roles.js:23

        return this._client.post((0, path_1.path) `/projects/${project_id}/groups/${groupID}/roles`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #dd674d84065328ed — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/groups/roles.js:43

        return this._client.get((0, path_1.path) `/projects/${project_id}/groups/${group_id}/roles/${roleID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a7cc6fb6551c7cdc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/groups/roles.mjs:20

        return this._client.post(path `/projects/${project_id}/groups/${groupID}/roles`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fd240208924a7164 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/groups/roles.mjs:40

        return this._client.get(path `/projects/${project_id}/groups/${group_id}/roles/${roleID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #dcc399f86a4b6922 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/hosted-tool-permissions.js:20

        return this._client.get((0, path_1.path) `/organization/projects/${projectID}/hosted_tool_permissions`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0520e4a3a7984f68 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/hosted-tool-permissions.js:37

        return this._client.post((0, path_1.path) `/organization/projects/${projectID}/hosted_tool_permissions`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2715189a6fdd2dfd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/hosted-tool-permissions.mjs:17

        return this._client.get(path `/organization/projects/${projectID}/hosted_tool_permissions`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #05147b6ca91e061c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/hosted-tool-permissions.mjs:34

        return this._client.post(path `/organization/projects/${projectID}/hosted_tool_permissions`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #43b47e60a95bbad5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/model-permissions.js:20

        return this._client.get((0, path_1.path) `/organization/projects/${projectID}/model_permissions`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2c4123907b7fbd03 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/model-permissions.js:38

        return this._client.post((0, path_1.path) `/organization/projects/${projectID}/model_permissions`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a1b644cb9bb9c4a6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/model-permissions.mjs:17

        return this._client.get(path `/organization/projects/${projectID}/model_permissions`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7403e102b5b3413b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/model-permissions.mjs:35

        return this._client.post(path `/organization/projects/${projectID}/model_permissions`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #773bea1f8076eb5d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/projects.js:77

        return this._client.get((0, path_1.path) `/organization/projects/${projectID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fbb2d424209e7df5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/projects.js:94

        return this._client.post((0, path_1.path) `/organization/projects/${projectID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #dcacb3d290a24af2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/projects.js:131

        return this._client.post((0, path_1.path) `/organization/projects/${projectID}/archive`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #16a5e3a5aa75b3d5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/projects.mjs:73

        return this._client.get(path `/organization/projects/${projectID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #db7236baa9724e11 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/projects.mjs:90

        return this._client.post(path `/organization/projects/${projectID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f2562d336228e267 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/projects.mjs:127

        return this._client.post(path `/organization/projects/${projectID}/archive`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #847ea8c556c11e62 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/rate-limits.js:39

        return this._client.post((0, path_1.path) `/organization/projects/${project_id}/rate_limits/${rateLimitID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c6a938bb93ce033f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/rate-limits.mjs:36

        return this._client.post(path `/organization/projects/${project_id}/rate_limits/${rateLimitID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #35a948972a59d4b9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/roles.js:22

        return this._client.post((0, path_1.path) `/projects/${projectID}/roles`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #29f5b5762fd5a0db — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/roles.js:42

        return this._client.get((0, path_1.path) `/projects/${project_id}/roles/${roleID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c3bded7e7a56c5a6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/roles.js:61

        return this._client.post((0, path_1.path) `/projects/${project_id}/roles/${roleID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #19f7513b5d97ac4f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/roles.mjs:19

        return this._client.post(path `/projects/${projectID}/roles`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #aae04839a44be3b7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/roles.mjs:39

        return this._client.get(path `/projects/${project_id}/roles/${roleID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6323e1cae1742217 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/roles.mjs:58

        return this._client.post(path `/projects/${project_id}/roles/${roleID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9eaf7008f1a28be2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/service-accounts/api-keys.js:22

        return this._client.post((0, path_1.path) `/organization/projects/${project_id}/service_accounts/${serviceAccountID}/api_keys`, { body, ...options, __security: { adminAPIKeyAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6802b178129ca915 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/service-accounts/api-keys.mjs:19

        return this._client.post(path `/organization/projects/${project_id}/service_accounts/${serviceAccountID}/api_keys`, { body, ...options, __security: { adminAPIKeyAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #819676c2a2666924 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/service-accounts/service-accounts.js:30

        return this._client.post((0, path_1.path) `/organization/projects/${projectID}/service_accounts`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c4b43e29de59e4f4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/service-accounts/service-accounts.js:50

        return this._client.get((0, path_1.path) `/organization/projects/${project_id}/service_accounts/${serviceAccountID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #056094f29fa5c6c6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/service-accounts/service-accounts.js:69

        return this._client.post((0, path_1.path) `/organization/projects/${project_id}/service_accounts/${serviceAccountID}`, { body, ...options, __security: { adminAPIKeyAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3aea1afa599f7d24 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/service-accounts/service-accounts.mjs:26

        return this._client.post(path `/organization/projects/${projectID}/service_accounts`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #09b1754d4d05f09d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/service-accounts/service-accounts.mjs:46

        return this._client.get(path `/organization/projects/${project_id}/service_accounts/${serviceAccountID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #73c514944786b017 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/service-accounts/service-accounts.mjs:65

        return this._client.post(path `/organization/projects/${project_id}/service_accounts/${serviceAccountID}`, { body, ...options, __security: { adminAPIKeyAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a82527128e5a1b25 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/spend-alerts.js:30

        return this._client.post((0, path_1.path) `/organization/projects/${projectID}/spend_alerts`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d7c9f19c04cda52c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/spend-alerts.js:50

        return this._client.get((0, path_1.path) `/organization/projects/${project_id}/spend_alerts/${alertID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9c631ab7b59d28cb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/spend-alerts.js:78

        return this._client.post((0, path_1.path) `/organization/projects/${project_id}/spend_alerts/${alertID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2c80cad47cb53061 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/spend-alerts.mjs:27

        return this._client.post(path `/organization/projects/${projectID}/spend_alerts`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3a61b41c2e0b5e38 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/spend-alerts.mjs:47

        return this._client.get(path `/organization/projects/${project_id}/spend_alerts/${alertID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3bff521b727089da — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/spend-alerts.mjs:75

        return this._client.post(path `/organization/projects/${project_id}/spend_alerts/${alertID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1b5c845b95da32f6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/users/roles.js:23

        return this._client.post((0, path_1.path) `/projects/${project_id}/users/${userID}/roles`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f6a6080ac5ecf047 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/users/roles.js:43

        return this._client.get((0, path_1.path) `/projects/${project_id}/users/${user_id}/roles/${roleID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #88fc8f86d7eb3627 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/users/roles.mjs:20

        return this._client.post(path `/projects/${project_id}/users/${userID}/roles`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #83528763befb57a9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/users/roles.mjs:40

        return this._client.get(path `/projects/${project_id}/users/${user_id}/roles/${roleID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f83c0e988e83a2b5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/users/users.js:30

        return this._client.post((0, path_1.path) `/organization/projects/${projectID}/users`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bc27bd73c36ed173 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/users/users.js:50

        return this._client.get((0, path_1.path) `/organization/projects/${project_id}/users/${userID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b23f88893096b496 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/users/users.js:69

        return this._client.post((0, path_1.path) `/organization/projects/${project_id}/users/${userID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1df2a5ca1f33055a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/users/users.mjs:26

        return this._client.post(path `/organization/projects/${projectID}/users`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c959a250acd2ce68 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/users/users.mjs:46

        return this._client.get(path `/organization/projects/${project_id}/users/${userID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #13a301af41cc3233 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/projects/users/users.mjs:65

        return this._client.post(path `/organization/projects/${project_id}/users/${userID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d8821fa0fcb29122 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/roles.js:38

        return this._client.get((0, path_1.path) `/organization/roles/${roleID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2988b6338155bcfd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/roles.js:54

        return this._client.post((0, path_1.path) `/organization/roles/${roleID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a27ca0c8e8c2752b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/roles.mjs:35

        return this._client.get(path `/organization/roles/${roleID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #448f95181ea7a3f7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/roles.mjs:51

        return this._client.post(path `/organization/roles/${roleID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8625d730f7156d64 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/spend-alerts.js:45

        return this._client.get((0, path_1.path) `/organization/spend_alerts/${alertID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #045ae2ebddffb44f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/spend-alerts.js:71

        return this._client.post((0, path_1.path) `/organization/spend_alerts/${alertID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #83c383fb2e6cb22e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/spend-alerts.mjs:42

        return this._client.get(path `/organization/spend_alerts/${alertID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5bda0cfd825a4083 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/spend-alerts.mjs:68

        return this._client.post(path `/organization/spend_alerts/${alertID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #74b00a47e845e8c0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/users/roles.js:22

        return this._client.post((0, path_1.path) `/organization/users/${userID}/roles`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #96afa9f4a2cf123a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/users/roles.js:42

        return this._client.get((0, path_1.path) `/organization/users/${user_id}/roles/${roleID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #55fbac54585e86d0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/users/roles.mjs:19

        return this._client.post(path `/organization/users/${userID}/roles`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #34e0a6d098232d8a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/users/roles.mjs:39

        return this._client.get(path `/organization/users/${user_id}/roles/${roleID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4a740fccfd097a2d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/users/users.js:26

        return this._client.get((0, path_1.path) `/organization/users/${userID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cb080db1e232ee05 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/users/users.js:41

        return this._client.post((0, path_1.path) `/organization/users/${userID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bd90687ab9cacd2c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/users/users.mjs:22

        return this._client.get(path `/organization/users/${userID}`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #311a43d49d6add23 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/admin/organization/users/users.mjs:37

        return this._client.post(path `/organization/users/${userID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a5bb8a7b962be58c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/batches.js:22

        return this._client.get((0, path_1.path) `/batches/${batchID}`, { ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #db751e973bcd9694 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/batches.js:40

        return this._client.post((0, path_1.path) `/batches/${batchID}/cancel`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4e8b0fe0b49b9aca — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/batches.mjs:19

        return this._client.get(path `/batches/${batchID}`, { ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #098d21f90e7c1603 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/batches.mjs:37

        return this._client.post(path `/batches/${batchID}/cancel`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #71ce95c2c9bf96a2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/assistants.js:32

        return this._client.get((0, path_1.path) `/assistants/${assistantID}`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b5b5c560d8734762 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/assistants.js:44

        return this._client.post((0, path_1.path) `/assistants/${assistantID}`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d1ae183314344596 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/assistants.mjs:29

        return this._client.get(path `/assistants/${assistantID}`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a4953d4a53a25a93 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/assistants.mjs:41

        return this._client.post(path `/assistants/${assistantID}`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b8867dca339f15eb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/chatkit/sessions.js:41

        return this._client.post((0, path_1.path) `/chatkit/sessions/${sessionID}/cancel`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'chatkit_beta=v1' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #79db6c84560a88e3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/chatkit/sessions.mjs:38

        return this._client.post(path `/chatkit/sessions/${sessionID}/cancel`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'chatkit_beta=v1' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8b0ea68ed94dbc85 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/chatkit/threads.js:20

        return this._client.get((0, path_1.path) `/chatkit/threads/${threadID}`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'chatkit_beta=v1' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4b954cb89241926f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/chatkit/threads.mjs:17

        return this._client.get(path `/chatkit/threads/${threadID}`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'chatkit_beta=v1' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #95c59d8d7926e7b5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/responses/responses.js:34

        return this._client.get((0, path_1.path) `/responses/${responseID}?beta=true`, {
            query,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { ...(betas?.toString() != null ? { 'openai-beta': betas?.toString() } : undefined) },
                options?.headers,
            ]),
            stream: params?.stream ?? false,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #791cefb6f8c7280d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/responses/responses.js:80

        return this._client.post((0, path_1.path) `/responses/${responseID}/cancel?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { ...(betas?.toString() != null ? { 'openai-beta': betas?.toString() } : undefined) },
                options?.headers,
            ]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e602183f051557e9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/responses/responses.mjs:30

        return this._client.get(path `/responses/${responseID}?beta=true`, {
            query,
            ...options,
            headers: buildHeaders([
                { ...(betas?.toString() != null ? { 'openai-beta': betas?.toString() } : undefined) },
                options?.headers,
            ]),
            stream: params?.stream ?? false,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #931e0db7d9c852d4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/responses/responses.mjs:76

        return this._client.post(path `/responses/${responseID}/cancel?beta=true`, {
            ...options,
            headers: buildHeaders([
                { ...(betas?.toString() != null ? { 'openai-beta': betas?.toString() } : undefined) },
                options?.headers,
            ]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #36642d7e4dcc55cb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/messages.js:21

        return this._client.post((0, path_1.path) `/threads/${threadID}/messages`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9a931af465e2f4d6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/messages.js:35

        return this._client.get((0, path_1.path) `/threads/${thread_id}/messages/${messageID}`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #744d1f7e05304c35 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/messages.js:48

        return this._client.post((0, path_1.path) `/threads/${thread_id}/messages/${messageID}`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #34ccb63bdd1e53ce — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/messages.mjs:18

        return this._client.post(path `/threads/${threadID}/messages`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #828df102221a9997 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/messages.mjs:32

        return this._client.get(path `/threads/${thread_id}/messages/${messageID}`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c301126a0d5919b9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/messages.mjs:45

        return this._client.post(path `/threads/${thread_id}/messages/${messageID}`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cda0ec7a940cea23 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/runs/runs.js:26

        return this._client.post((0, path_1.path) `/threads/${threadID}/runs`, {
            query: { include },
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            stream: params.stream ?? false,
            __synthesizeEventData: true,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #08a71f9769cc9044 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/runs/runs.js:43

        return this._client.get((0, path_1.path) `/threads/${thread_id}/runs/${runID}`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5baf5668e8d99f30 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/runs/runs.js:56

        return this._client.post((0, path_1.path) `/threads/${thread_id}/runs/${runID}`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3d811c240746235e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/runs/runs.js:83

        return this._client.post((0, path_1.path) `/threads/${thread_id}/runs/${runID}/cancel`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #61064e792dd5987b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/runs/runs.js:163

        return this._client.post((0, path_1.path) `/threads/${thread_id}/runs/${runID}/submit_tool_outputs`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            stream: params.stream ?? false,
            __synthesizeEventData: true,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2318d30ea775562d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/runs/runs.mjs:22

        return this._client.post(path `/threads/${threadID}/runs`, {
            query: { include },
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            stream: params.stream ?? false,
            __synthesizeEventData: true,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f3e65b73101abb7b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/runs/runs.mjs:39

        return this._client.get(path `/threads/${thread_id}/runs/${runID}`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #995fd9e4bca5b1d1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/runs/runs.mjs:52

        return this._client.post(path `/threads/${thread_id}/runs/${runID}`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2eb34d6b016c24c2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/runs/runs.mjs:79

        return this._client.post(path `/threads/${thread_id}/runs/${runID}/cancel`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d1233ddc2ab3e6d2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/runs/runs.mjs:159

        return this._client.post(path `/threads/${thread_id}/runs/${runID}/submit_tool_outputs`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            stream: params.stream ?? false,
            __synthesizeEventData: true,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f2bd6a36f2b974b3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/runs/steps.js:22

        return this._client.get((0, path_1.path) `/threads/${thread_id}/runs/${run_id}/steps/${stepID}`, {
            query,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c9cdc269d935081e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/runs/steps.mjs:19

        return this._client.get(path `/threads/${thread_id}/runs/${run_id}/steps/${stepID}`, {
            query,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1e22d9bf0b842042 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/threads.js:44

        return this._client.get((0, path_1.path) `/threads/${threadID}`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4264033163a2add3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/threads.js:56

        return this._client.post((0, path_1.path) `/threads/${threadID}`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fc7bfdedb4bee85c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/threads.mjs:40

        return this._client.get(path `/threads/${threadID}`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fe2840d565d215ed — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/threads.mjs:52

        return this._client.post(path `/threads/${threadID}`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #deb3b90fc94d5e29 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/chat/completions/completions.js:42

        return this._client.get((0, path_1.path) `/chat/completions/${completionID}`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cd62fe6a16703caa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/chat/completions/completions.js:61

        return this._client.post((0, path_1.path) `/chat/completions/${completionID}`, {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c0daba39be7f7cd8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/chat/completions/completions.mjs:38

        return this._client.get(path `/chat/completions/${completionID}`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6c4779774744b629 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/chat/completions/completions.mjs:57

        return this._client.post(path `/chat/completions/${completionID}`, {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b77558b5c5383578 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/containers/containers.js:27

        return this._client.get((0, path_1.path) `/containers/${containerID}`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #35a73184b2a3cac2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/containers/containers.mjs:23

        return this._client.get(path `/containers/${containerID}`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #75c751ee9f37e7ac — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/containers/files/content.js:14

        return this._client.get((0, path_1.path) `/containers/${container_id}/files/${fileID}/content`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ Accept: 'application/binary' }, options?.headers]),
            __security: { bearerAuth: true },
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #14c14cf816e3ef9f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/containers/files/content.mjs:11

        return this._client.get(path `/containers/${container_id}/files/${fileID}/content`, {
            ...options,
            headers: buildHeaders([{ Accept: 'application/binary' }, options?.headers]),
            __security: { bearerAuth: true },
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #37d66d40805771d8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/containers/files/files.js:25

        return this._client.post((0, path_1.path) `/containers/${containerID}/files`, (0, uploads_1.maybeMultipartFormRequestOptions)({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #542ea2b245a3ff07 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/containers/files/files.js:32

        return this._client.get((0, path_1.path) `/containers/${container_id}/files/${fileID}`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b9b566e6307887fc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/containers/files/files.mjs:21

        return this._client.post(path `/containers/${containerID}/files`, maybeMultipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e7da01e457730073 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/containers/files/files.mjs:28

        return this._client.get(path `/containers/${container_id}/files/${fileID}`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0983e4963354af7b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/conversations/conversations.js:28

        return this._client.get((0, path_1.path) `/conversations/${conversationID}`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #90efeb9d673212d7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/conversations/conversations.js:37

        return this._client.post((0, path_1.path) `/conversations/${conversationID}`, {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0b7ac43810c69041 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/conversations/conversations.mjs:24

        return this._client.get(path `/conversations/${conversationID}`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f3feaf5e71ebcd01 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/conversations/conversations.mjs:33

        return this._client.post(path `/conversations/${conversationID}`, {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #00b415e812375ea5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/conversations/items.js:17

        return this._client.post((0, path_1.path) `/conversations/${conversationID}/items`, {
            query: { include },
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ea41c92583c108bc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/conversations/items.js:29

        return this._client.get((0, path_1.path) `/conversations/${conversation_id}/items/${itemID}`, {
            query,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #26419ddb0ea54c0a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/conversations/items.mjs:14

        return this._client.post(path `/conversations/${conversationID}/items`, {
            query: { include },
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #39f6f66ae1027c57 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/conversations/items.mjs:26

        return this._client.get(path `/conversations/${conversation_id}/items/${itemID}`, {
            query,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #8ed406b4b2368f51 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/evals/evals.js:34

        return this._client.get((0, path_1.path) `/evals/${evalID}`, { ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #92f9d153617700a3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/evals/evals.js:40

        return this._client.post((0, path_1.path) `/evals/${evalID}`, { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #8ce2dcfc092d4c38 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/evals/evals.mjs:30

        return this._client.get(path `/evals/${evalID}`, { ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #a63c5aaf69fd48df — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/evals/evals.mjs:36

        return this._client.post(path `/evals/${evalID}`, { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #bd117e88490f4861 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/evals/runs/output-items.js:17

        return this._client.get((0, path_1.path) `/evals/${eval_id}/runs/${run_id}/output_items/${outputItemID}`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #b3979805b9168d27 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/evals/runs/output-items.mjs:14

        return this._client.get(path `/evals/${eval_id}/runs/${run_id}/output_items/${outputItemID}`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #5076c3908b202689 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/evals/runs/runs.js:25

        return this._client.post((0, path_1.path) `/evals/${evalID}/runs`, {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #ea85817a3bba1fc0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/evals/runs/runs.js:36

        return this._client.get((0, path_1.path) `/evals/${eval_id}/runs/${runID}`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #187e2916501f6c20 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/evals/runs/runs.js:66

        return this._client.post((0, path_1.path) `/evals/${eval_id}/runs/${runID}`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #d278a5a3d0690fa2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/evals/runs/runs.mjs:21

        return this._client.post(path `/evals/${evalID}/runs`, {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #28982638653d5314 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/evals/runs/runs.mjs:32

        return this._client.get(path `/evals/${eval_id}/runs/${runID}`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #c2a65760c1e0a0b1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/evals/runs/runs.mjs:62

        return this._client.post(path `/evals/${eval_id}/runs/${runID}`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ac1192579af09bcd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/files.js:52

        return this._client.get((0, path_1.path) `/files/${fileID}`, { ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #050d332b929482ca — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/files.js:74

        return this._client.get((0, path_1.path) `/files/${fileID}/content`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ Accept: 'application/binary' }, options?.headers]),
            __security: { bearerAuth: true },
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1e1ac7ffad22e1c1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/files.mjs:49

        return this._client.get(path `/files/${fileID}`, { ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b9e475f1166b8988 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/files.mjs:71

        return this._client.get(path `/files/${fileID}/content`, {
            ...options,
            headers: buildHeaders([{ Accept: 'application/binary' }, options?.headers]),
            __security: { bearerAuth: true },
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f3caf0bf81a06c45 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/fine-tuning/checkpoints/permissions.js:41

        return this._client.get((0, path_1.path) `/fine_tuning/checkpoints/${fineTunedModelCheckpoint}/permissions`, {
            query,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4f757b8d077888a4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/fine-tuning/checkpoints/permissions.mjs:38

        return this._client.get(path `/fine_tuning/checkpoints/${fineTunedModelCheckpoint}/permissions`, {
            query,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fd5f515bc4b68857 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/fine-tuning/jobs/jobs.js:52

        return this._client.get((0, path_1.path) `/fine_tuning/jobs/${fineTuningJobID}`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7d251e1540b48acc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/fine-tuning/jobs/jobs.js:86

        return this._client.post((0, path_1.path) `/fine_tuning/jobs/${fineTuningJobID}/cancel`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #84341d200eb18e35 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/fine-tuning/jobs/jobs.js:118

        return this._client.post((0, path_1.path) `/fine_tuning/jobs/${fineTuningJobID}/pause`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #617a2bb9c311bd30 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/fine-tuning/jobs/jobs.js:134

        return this._client.post((0, path_1.path) `/fine_tuning/jobs/${fineTuningJobID}/resume`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1daf590eea303dfc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/fine-tuning/jobs/jobs.mjs:48

        return this._client.get(path `/fine_tuning/jobs/${fineTuningJobID}`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5f05f5aa60c1d9cf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/fine-tuning/jobs/jobs.mjs:82

        return this._client.post(path `/fine_tuning/jobs/${fineTuningJobID}/cancel`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4b38799f4fb96f94 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/fine-tuning/jobs/jobs.mjs:114

        return this._client.post(path `/fine_tuning/jobs/${fineTuningJobID}/pause`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #05cd162227c16302 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/fine-tuning/jobs/jobs.mjs:130

        return this._client.post(path `/fine_tuning/jobs/${fineTuningJobID}/resume`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cff221a1f78a112a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/models.js:17

        return this._client.get((0, path_1.path) `/models/${model}`, { ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #698b5914345f066d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/models.mjs:14

        return this._client.get(path `/models/${model}`, { ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8ce039b7e578f3bc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/realtime/calls.js:21

        return this._client.post((0, path_1.path) `/realtime/calls/${callID}/accept`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ Accept: '*/*' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0d12a533253f5dc7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/realtime/calls.js:37

        return this._client.post((0, path_1.path) `/realtime/calls/${callID}/hangup`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ Accept: '*/*' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #56ac5bd6cef8355e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/realtime/calls.js:54

        return this._client.post((0, path_1.path) `/realtime/calls/${callID}/refer`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ Accept: '*/*' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bd09b3ebcd5ef270 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/realtime/calls.js:70

        return this._client.post((0, path_1.path) `/realtime/calls/${callID}/reject`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ Accept: '*/*' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #56483b25cb809dd6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/realtime/calls.mjs:18

        return this._client.post(path `/realtime/calls/${callID}/accept`, {
            body,
            ...options,
            headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #098901803ba07f25 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/realtime/calls.mjs:34

        return this._client.post(path `/realtime/calls/${callID}/hangup`, {
            ...options,
            headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7af3f5d541e6b28c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/realtime/calls.mjs:51

        return this._client.post(path `/realtime/calls/${callID}/refer`, {
            body,
            ...options,
            headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #67b68bba0569f679 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/realtime/calls.mjs:67

        return this._client.post(path `/realtime/calls/${callID}/reject`, {
            body,
            ...options,
            headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9dc5d1690d31165f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/responses/responses.js:35

        return this._client.get((0, path_1.path) `/responses/${responseID}`, {
            query,
            ...options,
            stream: query?.stream ?? false,
            __security: { bearerAuth: true },
        })._thenUnwrap((rsp) => {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2a6defa93c01a64e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/responses/responses.js:88

        return this._client.post((0, path_1.path) `/responses/${responseID}/cancel`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5671c6c1fcfc6da0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/responses/responses.mjs:31

        return this._client.get(path `/responses/${responseID}`, {
            query,
            ...options,
            stream: query?.stream ?? false,
            __security: { bearerAuth: true },
        })._thenUnwrap((rsp) => {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #821e9e809ac90b19 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/responses/responses.mjs:84

        return this._client.post(path `/responses/${responseID}/cancel`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3d2a3dcb5f7bc9ff — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/skills/content.js:13

        return this._client.get((0, path_1.path) `/skills/${skillID}/content`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ Accept: 'application/binary' }, options?.headers]),
            __security: { bearerAuth: true },
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cf38e09061b4458f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/skills/content.mjs:10

        return this._client.get(path `/skills/${skillID}/content`, {
            ...options,
            headers: buildHeaders([{ Accept: 'application/binary' }, options?.headers]),
            __security: { bearerAuth: true },
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bf209163a6cd847b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/skills/skills.js:30

        return this._client.get((0, path_1.path) `/skills/${skillID}`, { ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #55af35ed4dd93b0c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/skills/skills.js:36

        return this._client.post((0, path_1.path) `/skills/${skillID}`, {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1f9d95de6625cf94 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/skills/skills.mjs:26

        return this._client.get(path `/skills/${skillID}`, { ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #993fd738527517c7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/skills/skills.mjs:32

        return this._client.post(path `/skills/${skillID}`, {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c3778297fb483592 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/skills/versions/content.js:14

        return this._client.get((0, path_1.path) `/skills/${skill_id}/versions/${version}/content`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ Accept: 'application/binary' }, options?.headers]),
            __security: { bearerAuth: true },
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d4033e30e6927526 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/skills/versions/content.mjs:11

        return this._client.get(path `/skills/${skill_id}/versions/${version}/content`, {
            ...options,
            headers: buildHeaders([{ Accept: 'application/binary' }, options?.headers]),
            __security: { bearerAuth: true },
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #481d6b870b75e8b7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/skills/versions/versions.js:21

        return this._client.post((0, path_1.path) `/skills/${skillID}/versions`, (0, uploads_1.maybeMultipartFormRequestOptions)({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5df3f56df0850fbe — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/skills/versions/versions.js:28

        return this._client.get((0, path_1.path) `/skills/${skill_id}/versions/${version}`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #142a30b8d9cb3e08 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/skills/versions/versions.mjs:17

        return this._client.post(path `/skills/${skillID}/versions`, maybeMultipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6f35480001f4a475 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/skills/versions/versions.mjs:24

        return this._client.get(path `/skills/${skill_id}/versions/${version}`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #49c2a84e717a61a3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/uploads/parts.js:26

        return this._client.post((0, path_1.path) `/uploads/${uploadID}/parts`, (0, uploads_1.multipartFormRequestOptions)({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #92b608f89f39b04a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/uploads/parts.mjs:23

        return this._client.post(path `/uploads/${uploadID}/parts`, multipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fcf5f8d48aed32f2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/uploads/uploads.js:50

        return this._client.post((0, path_1.path) `/uploads/${uploadID}/cancel`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a839e79170ba1ff1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/uploads/uploads.js:73

        return this._client.post((0, path_1.path) `/uploads/${uploadID}/complete`, {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c22ff133e2d91f82 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/uploads/uploads.mjs:46

        return this._client.post(path `/uploads/${uploadID}/cancel`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #01292fe3f1a92814 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/uploads/uploads.mjs:69

        return this._client.post(path `/uploads/${uploadID}/complete`, {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #70f0ee291eeb417e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/file-batches.js:16

        return this._client.post((0, path_1.path) `/vector_stores/${vectorStoreID}/file_batches`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b1e8c257613bddd8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/file-batches.js:28

        return this._client.get((0, path_1.path) `/vector_stores/${vector_store_id}/file_batches/${batchID}`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8652b72b2c5e139b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/file-batches.js:40

        return this._client.post((0, path_1.path) `/vector_stores/${vector_store_id}/file_batches/${batchID}/cancel`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #917de5c4b2c92a15 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/file-batches.mjs:13

        return this._client.post(path `/vector_stores/${vectorStoreID}/file_batches`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e72fb9fdd4f110fd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/file-batches.mjs:25

        return this._client.get(path `/vector_stores/${vector_store_id}/file_batches/${batchID}`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #31870880aeeefe97 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/file-batches.mjs:37

        return this._client.post(path `/vector_stores/${vector_store_id}/file_batches/${batchID}/cancel`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8c1aa2a883eb5fa6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/files.js:17

        return this._client.post((0, path_1.path) `/vector_stores/${vectorStoreID}/files`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5f685d57e8c2f895 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/files.js:29

        return this._client.get((0, path_1.path) `/vector_stores/${vector_store_id}/files/${fileID}`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #90e0c78f603905f9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/files.js:40

        return this._client.post((0, path_1.path) `/vector_stores/${vector_store_id}/files/${fileID}`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0f202b30c3d40015 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/files.mjs:14

        return this._client.post(path `/vector_stores/${vectorStoreID}/files`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fc4430aa0b34f784 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/files.mjs:26

        return this._client.get(path `/vector_stores/${vector_store_id}/files/${fileID}`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b401665613c688b8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/files.mjs:37

        return this._client.post(path `/vector_stores/${vector_store_id}/files/${fileID}`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5555cc42efa7cb53 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/vector-stores.js:35

        return this._client.get((0, path_1.path) `/vector_stores/${vectorStoreID}`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #92efb11c34a5bcc2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/vector-stores.js:45

        return this._client.post((0, path_1.path) `/vector_stores/${vectorStoreID}`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #094a247ba9a77568 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/vector-stores.mjs:31

        return this._client.get(path `/vector_stores/${vectorStoreID}`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8bdcbe827ff3a028 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/vector-stores.mjs:41

        return this._client.post(path `/vector_stores/${vectorStoreID}`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b873107469e7fe57 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/videos.js:21

        return this._client.get((0, path_1.path) `/videos/${videoID}`, { ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ca2e38968970c4d0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/videos.js:51

        return this._client.get((0, path_1.path) `/videos/${videoID}/content`, {
            query,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ Accept: 'application/binary' }, options?.headers]),
            __security: { bearerAuth: true },
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #02b707b3fa91fcd8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/videos.js:76

        return this._client.get((0, path_1.path) `/videos/characters/${characterID}`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2db5c2e6f266d51e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/videos.js:85

        return this._client.post((0, path_1.path) `/videos/${videoID}/remix`, (0, uploads_1.maybeMultipartFormRequestOptions)({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5bf96f8d44d8adf4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/videos.mjs:18

        return this._client.get(path `/videos/${videoID}`, { ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #88c472d75b48e81f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/videos.mjs:48

        return this._client.get(path `/videos/${videoID}/content`, {
            query,
            ...options,
            headers: buildHeaders([{ Accept: 'application/binary' }, options?.headers]),
            __security: { bearerAuth: true },
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #11b97df5fd9174a2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/videos.mjs:73

        return this._client.get(path `/videos/characters/${characterID}`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #72f5d82bbe44dd91 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/videos.mjs:82

        return this._client.post(path `/videos/${videoID}/remix`, maybeMultipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #92e41fc99cc18887 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/auth/subject-token-providers.ts:81

      const url = new URL(AZURE_IMDS_BASE_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ed9eabd94ee41002 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/auth/subject-token-providers.ts:145

      const url = new URL(
        `http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/identity`,
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #507297393864f373 — Environment-variable access.

pkgs/npm/[email protected]/src/azure.ts:101

        endpoint = process.env['AZURE_OPENAI_ENDPOINT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #7faacb7c88d968b1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/admin-api-keys.ts:41

    return this._client.get(path`/organization/admin_api_keys/${keyID}`, {
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #dffc20d45511c190 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/certificates.ts:55

    return this._client.get(path`/organization/certificates/${certificateID}`, {
      query,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0bb979a6e7389003 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/certificates.ts:78

    return this._client.post(path`/organization/certificates/${certificateID}`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e2142432460315aa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/groups/groups.ts:69

    return this._client.get(path`/organization/groups/${groupID}`, {
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #433a04630f374e84 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/groups/groups.ts:91

    return this._client.post(path`/organization/groups/${groupID}`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4f64704955455408 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/groups/roles.ts:24

    return this._client.post(path`/organization/groups/${groupID}/roles`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0c28f0ac36d39172 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/groups/roles.ts:49

    return this._client.get(path`/organization/groups/${group_id}/roles/${roleID}`, {
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #19034cf3ab82745f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/groups/users.ts:23

    return this._client.post(path`/organization/groups/${groupID}/users`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #be645e3a5f20bfd1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/groups/users.ts:48

    return this._client.get(path`/organization/groups/${group_id}/users/${userID}`, {
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c5963755f5d04465 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/invites.ts:47

    return this._client.get(path`/organization/invites/${inviteID}`, {
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #aee7a7db0d4c4871 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/api-keys.ts:32

    return this._client.get(path`/organization/projects/${project_id}/api_keys/${apiKeyID}`, {
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #80bf93ca3f3da34e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/data-retention.ts:21

    return this._client.get(path`/organization/projects/${projectID}/data_retention`, {
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #16f143dc8dac27f9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/data-retention.ts:44

    return this._client.post(path`/organization/projects/${projectID}/data_retention`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #13c57512c9319685 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/groups/groups.ts:38

    return this._client.post(path`/organization/projects/${projectID}/groups`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a87fa358313a762e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/groups/groups.ts:59

    return this._client.get(path`/organization/projects/${project_id}/groups/${groupID}`, {
      query,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3b910419b238cc24 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/groups/roles.ts:29

    return this._client.post(path`/projects/${project_id}/groups/${groupID}/roles`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #75a70540acaf3a49 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/groups/roles.ts:54

    return this._client.get(path`/projects/${project_id}/groups/${group_id}/roles/${roleID}`, {
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2f487b49a3103f37 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/hosted-tool-permissions.ts:21

    return this._client.get(path`/organization/projects/${projectID}/hosted_tool_permissions`, {
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #297a773cc4105642 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/hosted-tool-permissions.ts:43

    return this._client.post(path`/organization/projects/${projectID}/hosted_tool_permissions`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #60b52814d4685c25 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/model-permissions.ts:21

    return this._client.get(path`/organization/projects/${projectID}/model_permissions`, {
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #97ca08a65e063bd3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/model-permissions.ts:44

    return this._client.post(path`/organization/projects/${projectID}/model_permissions`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5b2c71a3048ba984 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/projects.ts:165

    return this._client.get(path`/organization/projects/${projectID}`, {
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #10828bcc24ab7669 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/projects.ts:183

    return this._client.post(path`/organization/projects/${projectID}`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #dd8ca469c1631774 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/projects.ts:225

    return this._client.post(path`/organization/projects/${projectID}/archive`, {
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e4b9064066ccfc75 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/rate-limits.ts:57

    return this._client.post(path`/organization/projects/${project_id}/rate_limits/${rateLimitID}`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cafa90f93aaa2130 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/roles.ts:25

    return this._client.post(path`/projects/${projectID}/roles`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cf5c9d6edb5bb997 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/roles.ts:46

    return this._client.get(path`/projects/${project_id}/roles/${roleID}`, {
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cb1c1b132a277ba3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/roles.ts:66

    return this._client.post(path`/projects/${project_id}/roles/${roleID}`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5a950a1665b86e0e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/service-accounts/api-keys.ts:27

    return this._client.post(
      path`/organization/projects/${project_id}/service_accounts/${serviceAccountID}/api_keys`,
      { body, ...options, __security: { adminAPIKeyAuth: true } },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c468f78c42f0e6af — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/service-accounts/service-accounts.ts:36

    return this._client.post(path`/organization/projects/${projectID}/service_accounts`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #542e0f74efc0e6ae — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/service-accounts/service-accounts.ts:61

    return this._client.get(path`/organization/projects/${project_id}/service_accounts/${serviceAccountID}`, {
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #533f09e4b17ad4ee — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/service-accounts/service-accounts.ts:85

    return this._client.post(
      path`/organization/projects/${project_id}/service_accounts/${serviceAccountID}`,
      { body, ...options, __security: { adminAPIKeyAuth: true } },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a24aa071ddca009d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/spend-alerts.ts:39

    return this._client.post(path`/organization/projects/${projectID}/spend_alerts`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #65aa9b2d9534d648 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/spend-alerts.ts:64

    return this._client.get(path`/organization/projects/${project_id}/spend_alerts/${alertID}`, {
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a82a8dba4e4289bf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/spend-alerts.ts:97

    return this._client.post(path`/organization/projects/${project_id}/spend_alerts/${alertID}`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0e5eddb73231eb16 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/users/roles.ts:26

    return this._client.post(path`/projects/${project_id}/users/${userID}/roles`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #da240e7d781ecdc4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/users/roles.ts:51

    return this._client.get(path`/projects/${project_id}/users/${user_id}/roles/${roleID}`, {
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0492bb8d1ca4b1ee — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/users/users.ts:43

    return this._client.post(path`/organization/projects/${projectID}/users`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f4979d016da16cbb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/users/users.ts:64

    return this._client.get(path`/organization/projects/${project_id}/users/${userID}`, {
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #430d4f82aaab277f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/projects/users/users.ts:84

    return this._client.post(path`/organization/projects/${project_id}/users/${userID}`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #97f148ddffcaa5b8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/roles.ts:40

    return this._client.get(path`/organization/roles/${roleID}`, {
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a9c99e303aa03fa2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/roles.ts:57

    return this._client.post(path`/organization/roles/${roleID}`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0d5154b779e12c8f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/spend-alerts.ts:51

    return this._client.get(path`/organization/spend_alerts/${alertID}`, {
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7e8daf08712ab7be — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/spend-alerts.ts:82

    return this._client.post(path`/organization/spend_alerts/${alertID}`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #22c27472ccc745b0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/users/roles.ts:25

    return this._client.post(path`/organization/users/${userID}/roles`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d044d1f0cfb8f4e6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/users/roles.ts:50

    return this._client.get(path`/organization/users/${user_id}/roles/${roleID}`, {
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6de8de493dcd5c3e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/users/users.ts:39

    return this._client.get(path`/organization/users/${userID}`, {
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #97c37a387f4769b3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/admin/organization/users/users.ts:55

    return this._client.post(path`/organization/users/${userID}`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fc3fd12ab4b2a86b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/batches.ts:26

    return this._client.get(path`/batches/${batchID}`, { ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b306c52f04910704 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/batches.ts:49

    return this._client.post(path`/batches/${batchID}/cancel`, {
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #723fcdd38c05f6fe — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/assistants.ts:40

    return this._client.get(path`/assistants/${assistantID}`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #adf11624daf41b2e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/assistants.ts:53

    return this._client.post(path`/assistants/${assistantID}`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3d0e5a123bddb3d2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/chatkit/sessions.ts:44

    return this._client.post(path`/chatkit/sessions/${sessionID}/cancel`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'chatkit_beta=v1' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #27d3a0a1f5024c96 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/chatkit/threads.ts:26

    return this._client.get(path`/chatkit/threads/${threadID}`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'chatkit_beta=v1' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #65fea13ef7e2db37 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/responses/responses.ts:95

    return this._client.get(path`/responses/${responseID}?beta=true`, {
      query,
      ...options,
      headers: buildHeaders([
        { ...(betas?.toString() != null ? { 'openai-beta': betas?.toString() } : undefined) },
        options?.headers,
      ]),
      stream: params?.stream ?? false,
      __security: { bearerAuth: true },
    }) as APIPromise<BetaResponse> | APIPromise<Stream<BetaResponseStreamEvent>>;

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #da14daf29e002f94 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/responses/responses.ts:151

    return this._client.post(path`/responses/${responseID}/cancel?beta=true`, {
      ...options,
      headers: buildHeaders([
        { ...(betas?.toString() != null ? { 'openai-beta': betas?.toString() } : undefined) },
        options?.headers,
      ]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #56275863faf5f04f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/threads/messages.ts:24

    return this._client.post(path`/threads/${threadID}/messages`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #144c94361785ea0d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/threads/messages.ts:39

    return this._client.get(path`/threads/${thread_id}/messages/${messageID}`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #38f569cc2c061129 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/threads/messages.ts:53

    return this._client.post(path`/threads/${thread_id}/messages/${messageID}`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9451d12b664bba7e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/threads/runs/runs.ts:74

    return this._client.post(path`/threads/${threadID}/runs`, {
      query: { include },
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      stream: params.stream ?? false,
      __synthesizeEventData: true,
      __security: { bearerAuth: true },
    }) as APIPromise<Run> | APIPromise<Stream<AssistantsAPI.AssistantStreamEvent>>;

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7ec3c48f6b31b95d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/threads/runs/runs.ts:92

    return this._client.get(path`/threads/${thread_id}/runs/${runID}`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7547645d328a16c3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/threads/runs/runs.ts:106

    return this._client.post(path`/threads/${thread_id}/runs/${runID}`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f751de7bcc3df8cd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/threads/runs/runs.ts:139

    return this._client.post(path`/threads/${thread_id}/runs/${runID}/cancel`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f1ad0b08cf374bf5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/threads/runs/runs.ts:265

    return this._client.post(path`/threads/${thread_id}/runs/${runID}/submit_tool_outputs`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      stream: params.stream ?? false,
      __synthesizeEventData: true,
      __security: { bearerAuth: true },
    }) as APIPromise<Run> | APIPromise<Stream<AssistantsAPI.AssistantStreamEvent>>;

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5b78370b2de8d6cd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/threads/runs/steps.ts:25

    return this._client.get(path`/threads/${thread_id}/runs/${run_id}/steps/${stepID}`, {
      query,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b46f33b83781f4e7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/threads/threads.ts:104

    return this._client.get(path`/threads/${threadID}`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #288ff34c3d02b3f2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/threads/threads.ts:117

    return this._client.post(path`/threads/${threadID}`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #56f8dcb044f77f62 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/chat/completions/completions.ts:100

    return this._client.get(path`/chat/completions/${completionID}`, {
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ecca66c29508881d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/chat/completions/completions.ts:124

    return this._client.post(path`/chat/completions/${completionID}`, {
      body,
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ff523e3caf79d2a8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/containers/containers.ts:37

    return this._client.get(path`/containers/${containerID}`, {
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a6695f47f4adbfdc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/containers/files/content.ts:15

    return this._client.get(path`/containers/${container_id}/files/${fileID}/content`, {
      ...options,
      headers: buildHeaders([{ Accept: 'application/binary' }, options?.headers]),
      __security: { bearerAuth: true },
      __binaryResponse: true,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4fd4e4f9930c0536 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/containers/files/files.ts:28

    return this._client.post(
      path`/containers/${containerID}/files`,
      maybeMultipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3c4354d8baf9f23d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/containers/files/files.ts:43

    return this._client.get(path`/containers/${container_id}/files/${fileID}`, {
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3c601e4dc6fac03f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/conversations/conversations.ts:41

    return this._client.get(path`/conversations/${conversationID}`, {
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #932debe4719cdc30 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/conversations/conversations.ts:55

    return this._client.post(path`/conversations/${conversationID}`, {
      body,
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #58a67139cb2325eb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/conversations/items.ts:28

    return this._client.post(path`/conversations/${conversationID}/items`, {
      query: { include },
      body,
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #81fb6f526dd5e0a4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/conversations/items.ts:45

    return this._client.get(path`/conversations/${conversation_id}/items/${itemID}`, {
      query,
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #a40a749d8ed37f38 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/evals/evals.ts:52

    return this._client.get(path`/evals/${evalID}`, { ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #dd38e45fa1882987 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/evals/evals.ts:59

    return this._client.post(path`/evals/${evalID}`, { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #71cfb1292008d482 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/evals/runs/output-items.ts:23

    return this._client.get(path`/evals/${eval_id}/runs/${run_id}/output_items/${outputItemID}`, {
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #1294e35742ce5d09 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/evals/runs/runs.ts:34

    return this._client.post(path`/evals/${evalID}/runs`, {
      body,
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #50d19ba5925d5370 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/evals/runs/runs.ts:50

    return this._client.get(path`/evals/${eval_id}/runs/${runID}`, {
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #95f9d787bfb3f6fe — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/evals/runs/runs.ts:87

    return this._client.post(path`/evals/${eval_id}/runs/${runID}`, {
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6918c79946c65c79 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/files.ts:58

    return this._client.get(path`/files/${fileID}`, { ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6ebb8cc9127f1893 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/files.ts:86

    return this._client.get(path`/files/${fileID}/content`, {
      ...options,
      headers: buildHeaders([{ Accept: 'application/binary' }, options?.headers]),
      __security: { bearerAuth: true },
      __binaryResponse: true,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fd5cb5988ac34245 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/fine-tuning/checkpoints/permissions.ts:60

    return this._client.get(path`/fine_tuning/checkpoints/${fineTunedModelCheckpoint}/permissions`, {
      query,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #becf9400d3efa794 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/fine-tuning/jobs/jobs.ts:58

    return this._client.get(path`/fine_tuning/jobs/${fineTuningJobID}`, {
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #29643792606a1328 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/fine-tuning/jobs/jobs.ts:97

    return this._client.post(path`/fine_tuning/jobs/${fineTuningJobID}/cancel`, {
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d97d0c2b6e13c86e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/fine-tuning/jobs/jobs.ts:139

    return this._client.post(path`/fine_tuning/jobs/${fineTuningJobID}/pause`, {
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #57b9e32a8df92aa6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/fine-tuning/jobs/jobs.ts:156

    return this._client.post(path`/fine_tuning/jobs/${fineTuningJobID}/resume`, {
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f34deb2f8bd80ec3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/models.ts:18

    return this._client.get(path`/models/${model}`, { ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6d4f45e30c0e9ba7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/realtime/calls.ts:24

    return this._client.post(path`/realtime/calls/${callID}/accept`, {
      body,
      ...options,
      headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #183a3a1f98f8f401 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/realtime/calls.ts:41

    return this._client.post(path`/realtime/calls/${callID}/hangup`, {
      ...options,
      headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d5a7094466846e10 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/realtime/calls.ts:59

    return this._client.post(path`/realtime/calls/${callID}/refer`, {
      body,
      ...options,
      headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cb7571a6612b0ec2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/realtime/calls.ts:80

    return this._client.post(path`/realtime/calls/${callID}/reject`, {
      body,
      ...options,
      headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3c162b2eedaa1d27 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/responses/responses.ts:158

      this._client.get(path`/responses/${responseID}`, {
        query,
        ...options,
        stream: query?.stream ?? false,
        __security: { bearerAuth: true },
      }) as APIPromise<Response> | APIPromise<Stream<ResponseStreamEvent>>

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #88b9dd2af367f147 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/responses/responses.ts:223

    return this._client.post(path`/responses/${responseID}/cancel`, {
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c1ba5b6661e6b689 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/skills/content.ts:14

    return this._client.get(path`/skills/${skillID}/content`, {
      ...options,
      headers: buildHeaders([{ Accept: 'application/binary' }, options?.headers]),
      __security: { bearerAuth: true },
      __binaryResponse: true,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e12bbfe26ca475ea — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/skills/skills.ts:43

    return this._client.get(path`/skills/${skillID}`, { ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #27434c9d4c6af161 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/skills/skills.ts:50

    return this._client.post(path`/skills/${skillID}`, {
      body,
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #05b8be56a4874ec3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/skills/versions/content.ts:15

    return this._client.get(path`/skills/${skill_id}/versions/${version}/content`, {
      ...options,
      headers: buildHeaders([{ Accept: 'application/binary' }, options?.headers]),
      __security: { bearerAuth: true },
      __binaryResponse: true,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7d983f7a61869e61 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/skills/versions/versions.ts:24

    return this._client.post(
      path`/skills/${skillID}/versions`,
      maybeMultipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7bd4448912ad3abb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/skills/versions/versions.ts:39

    return this._client.get(path`/skills/${skill_id}/versions/${version}`, {
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #849ea1b1d64d2577 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/uploads/parts.ts:28

    return this._client.post(
      path`/uploads/${uploadID}/parts`,
      multipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3361aa716384ad3e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/uploads/uploads.ts:50

    return this._client.post(path`/uploads/${uploadID}/cancel`, {
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f4196c27007fc8c8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/uploads/uploads.ts:74

    return this._client.post(path`/uploads/${uploadID}/complete`, {
      body,
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c28c3c281a1165cb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/vector-stores/file-batches.ts:25

    return this._client.post(path`/vector_stores/${vectorStoreID}/file_batches`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a18917526f934678 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/vector-stores/file-batches.ts:42

    return this._client.get(path`/vector_stores/${vector_store_id}/file_batches/${batchID}`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a04277a795538cc8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/vector-stores/file-batches.ts:59

    return this._client.post(path`/vector_stores/${vector_store_id}/file_batches/${batchID}/cancel`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f32c2e85aa9bda22 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/vector-stores/files.ts:24

    return this._client.post(path`/vector_stores/${vectorStoreID}/files`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5b90b540456d3248 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/vector-stores/files.ts:41

    return this._client.get(path`/vector_stores/${vector_store_id}/files/${fileID}`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a6df2ac847693575 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/vector-stores/files.ts:53

    return this._client.post(path`/vector_stores/${vector_store_id}/files/${fileID}`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d538a93169b67f77 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/vector-stores/vector-stores.ts:55

    return this._client.get(path`/vector_stores/${vectorStoreID}`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bbf45e59706d2334 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/vector-stores/vector-stores.ts:70

    return this._client.post(path`/vector_stores/${vectorStoreID}`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #19748da00734c7fc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/videos.ts:27

    return this._client.get(path`/videos/${videoID}`, { ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #03e6ff66289c5eea — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/videos.ts:74

    return this._client.get(path`/videos/${videoID}/content`, {
      query,
      ...options,
      headers: buildHeaders([{ Accept: 'application/binary' }, options?.headers]),
      __security: { bearerAuth: true },
      __binaryResponse: true,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #754dd70c3b63e1fd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/videos.ts:108

    return this._client.get(path`/videos/characters/${characterID}`, {
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #67fbe94f4e59d76d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/videos.ts:118

    return this._client.post(
      path`/videos/${videoID}/remix`,
      maybeMultipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

os-name

npm dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #a451e0a1159a61bd — Filesystem access.

pkgs/npm/[email protected]/index.js:8

		const osRelease = fs.readFileSync('/etc/os-release', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pdf-parse

npm dependency

expand_more 9 low-confidence finding(s)

low env_fs dependency Excluded from app score #8405245c460ac8ea — Filesystem access.

pkgs/npm/[email protected]/bin/cli.mjs:27

	const pkg = JSON.parse(await readFile(new URL('../package.json', import.meta.url)));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #02231ecea749a50a — Filesystem access.

pkgs/npm/[email protected]/bin/cli.mjs:103

		const data = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c0be837520420e6 — Filesystem access.

pkgs/npm/[email protected]/bin/cli.mjs:156

		await writeFile(options.output, output);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #615460a420f281eb — Filesystem access.

pkgs/npm/[email protected]/bin/cli.mjs:167

		await writeFile(options.output, output);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #16dab6b3e04301e9 — Filesystem access.

pkgs/npm/[email protected]/bin/cli.mjs:179

		await writeFile(options.output, output);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #81ca8050b00c80f8 — Filesystem access.

pkgs/npm/[email protected]/bin/cli.mjs:208

				await writeFile(filepath, image.data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f4fdbcbf041d26b0 — Filesystem access.

pkgs/npm/[email protected]/bin/cli.mjs:278

			await writeFile(filepath, page.data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #34134571e7da43ef — Filesystem access.

pkgs/npm/[email protected]/bin/cli.test.mjs:59

	await fs.writeFile(dummyFile, 'dummy content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d002370a37aff356 — Filesystem access.

pkgs/npm/[email protected]/bin/cli.test.mjs:90

	await fs.writeFile(dummyFile, 'dummy content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

puppeteer-chromium-resolver

npm dependency

expand_more 7 low-confidence finding(s)

low env_fs dependency Excluded from app score #628c5ec391a0001b — Filesystem access.

pkgs/npm/[email protected]/lib/detect.js:1

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #115c3e4a86ed5dc5 — Filesystem access.

pkgs/npm/[email protected]/lib/index.js:2

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f5dc1202542c636c — Environment-variable access.

pkgs/npm/[email protected]/lib/index.js:18

        const defaultHosts = process.env.PUPPETEER_DEFAULT_HOST || 'https://storage.googleapis.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d6cf2688d57213dc — Environment-variable access.

pkgs/npm/[email protected]/lib/index.js:134

    let revision = options.revision || process.env.PUPPETEER_REVISION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a8feafca5c17e1d — Filesystem access.

pkgs/npm/[email protected]/lib/index.js:201

        fs.writeFileSync(statsPath, JSON.stringify(stats, null, 4));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #081ec6673bed7f7f — Filesystem access.

pkgs/npm/[email protected]/lib/index.js:213

        stats = JSON.parse(fs.readFileSync(statsPath));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #055f7ef00923e041 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/util.js:65

            const request = isHttps ? https.request(options) : http.request(options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

puppeteer-core

npm dependency

expand_more 47 low-confidence finding(s)

low env_fs dependency Excluded from app score #dbe9dcc77eb0efa5 — Filesystem access.

pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:3407

          await fileHandle.writeFile(value);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8728404d5d16faac — Filesystem access.

pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:9481

          content = await environment.value.fs.promises.readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d465f6a589ab27e — Filesystem access.

pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:9536

          content = await environment.value.fs.promises.readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #65e5397d1ef95bd8 — Filesystem access.

pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:11665

        await environment.value.fs.promises.writeFile(path, typedArray);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #fb398e2f6189fe9f — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:23671

    let r = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a7f5bd9c438145fe — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:23677

    let r = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #994086e1f04eeaa7 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:23687

    let r = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #47f1714a1aa539e9 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:23693

    let r = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d27534e028608235 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:23735

    let t = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5c0f9bc35c2a254f — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:23741

    let t = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5682deae12c0d20d — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:23748

    let t = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #352a47940e1421e1 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:23765

    let t = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #eaaebd1ef370c992 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:23775

    let t = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6884c855e9762aa0 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:23781

    let t = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #f1ecfe9b51d544c8 — Filesystem access.

pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:27077

        const fileContent = await environment.value.fs.promises.readFile(portPath, 'ascii');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d138648c19f14781 — Filesystem access.

pkgs/npm/[email protected]/lib/puppeteer/api/Frame.js:659

                content = await environment.value.fs.promises.readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d442ed37f276f59c — Filesystem access.

pkgs/npm/[email protected]/lib/puppeteer/api/Frame.js:698

                content = await environment.value.fs.promises.readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f20fcc70b5ae732f — Filesystem access.

pkgs/npm/[email protected]/lib/puppeteer/api/Page.js:835

            await environment.value.fs.promises.writeFile(path, typedArray);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b77a704165d18b5 — Environment-variable access.

pkgs/npm/[email protected]/lib/puppeteer/bidi/Connection.js:57

        if (process.env['PUPPETEER_WEBDRIVER_BIDI_ONLY'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #b8997b0746b7b221 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/puppeteer/cdp/TargetManager.js:148

        const listener = this.#attachedToTargetListenersBySession.get(session);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b73eb99e371a10e5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/puppeteer/cdp/TargetManager.js:153

        const detachedListener = this.#detachedFromTargetListenersBySession.get(session);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #6c2ff39f2467d958 — Filesystem access.

pkgs/npm/[email protected]/lib/puppeteer/common/BrowserConnector.js:97

            const fileContent = await environment.value.fs.promises.readFile(portPath, 'ascii');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f16618ebe2757cfa — Filesystem access.

pkgs/npm/[email protected]/lib/puppeteer/common/util.js:163

                await fileHandle.writeFile(value);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ac914a881d106a7 — Environment-variable access.

pkgs/npm/[email protected]/lib/puppeteer/node/BrowserLauncher.js:241

        const bidiOnly = process.env['PUPPETEER_WEBDRIVER_BIDI_ONLY'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49c72665853d5d8a — Environment-variable access.

pkgs/npm/[email protected]/lib/puppeteer/node/ChromeLauncher.js:121

        const turnOnExperimentalFeaturesForTesting = process.env['PUPPETEER_TEST_EXPERIMENTAL_CHROME_FEATURES'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f8ab08a3e1e335f — Environment-variable access.

pkgs/npm/[email protected]/lib/puppeteer/node/ChromeLauncher.js:191

        if (process.env['PUPPETEER_DANGEROUS_NO_SANDBOX'] === 'true' &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #505b39ad058b5731 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/third_party/urlpattern-polyfill/urlpattern-polyfill.js:294

  let r = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #15db55e58323e98a — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/third_party/urlpattern-polyfill/urlpattern-polyfill.js:300

  let r = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f10a4d30e174e923 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/third_party/urlpattern-polyfill/urlpattern-polyfill.js:310

  let r = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d46700a5723e70b7 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/third_party/urlpattern-polyfill/urlpattern-polyfill.js:316

  let r = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7163e6fc1456b559 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/third_party/urlpattern-polyfill/urlpattern-polyfill.js:358

  let t = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #046ea5cbb4d8ff8d — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/third_party/urlpattern-polyfill/urlpattern-polyfill.js:364

  let t = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2ee9a665e5632f6c — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/third_party/urlpattern-polyfill/urlpattern-polyfill.js:371

  let t = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b36be58e8a99d07d — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/third_party/urlpattern-polyfill/urlpattern-polyfill.js:388

  let t = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fa0f2d894b8a7a32 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/third_party/urlpattern-polyfill/urlpattern-polyfill.js:398

  let t = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9211dd3cd3d9a34c — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/third_party/urlpattern-polyfill/urlpattern-polyfill.js:404

  let t = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #e9643fa16d3b62ef — Filesystem access.

pkgs/npm/[email protected]/src/api/Frame.ts:934

      content = await environment.value.fs.promises.readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #361f47c105351433 — Filesystem access.

pkgs/npm/[email protected]/src/api/Frame.ts:1014

      content = await environment.value.fs.promises.readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #879d5a1968f93a42 — Filesystem access.

pkgs/npm/[email protected]/src/api/Page.ts:2462

    await environment.value.fs.promises.writeFile(path, typedArray);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eebb38b72b946e0d — Environment-variable access.

pkgs/npm/[email protected]/src/bidi/Connection.ts:110

    if (process.env['PUPPETEER_WEBDRIVER_BIDI_ONLY'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #2c48299fb371cd3d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/cdp/TargetManager.ts:214

    const listener = this.#attachedToTargetListenersBySession.get(session);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #285c8f718b267fa9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/cdp/TargetManager.ts:221

      this.#detachedFromTargetListenersBySession.get(session);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #800b5d3e89cf356a — Filesystem access.

pkgs/npm/[email protected]/src/common/BrowserConnector.ts:143

      const fileContent = await environment.value.fs.promises.readFile(
        portPath,
        'ascii',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #27da8a410d959dff — Filesystem access.

pkgs/npm/[email protected]/src/common/util.ts:220

        await fileHandle.writeFile(value);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f02915a6ecb388c3 — Environment-variable access.

pkgs/npm/[email protected]/src/node/BrowserLauncher.ts:440

    const bidiOnly = process.env['PUPPETEER_WEBDRIVER_BIDI_ONLY'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #48a18de965853369 — Environment-variable access.

pkgs/npm/[email protected]/src/node/ChromeLauncher.ts:180

      process.env['PUPPETEER_TEST_EXPERIMENTAL_CHROME_FEATURES'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d4e7191fa7029b83 — Environment-variable access.

pkgs/npm/[email protected]/src/node/ChromeLauncher.ts:262

      process.env['PUPPETEER_DANGEROUS_NO_SANDBOX'] === 'true' &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

sanitize-filename

npm dependency

expand_more 3 low-confidence finding(s)

low env_fs dependency Excluded from app score #3b46acad52808983 — Filesystem access.

pkgs/npm/[email protected]/test.js:200

  fs.writeFile(filepath, "foobar", function(err) {
    t.ifError(err, "no error writing file");
    fs.readFile(filepath, function(err, data) {
      t.ifError(err, "no error reading file");
      t.equal(data.toString(), "foobar", "file contents equals");
      fs.unlink(filepath, function(err) {
        t.ifError(err, "no error unlinking file");
        t.end();
      });
    });
  });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #52037dbe26a77b55 — Filesystem access.

pkgs/npm/[email protected]/test.js:202

    fs.readFile(filepath, function(err, data) {
      t.ifError(err, "no error reading file");
      t.equal(data.toString(), "foobar", "file contents equals");
      fs.unlink(filepath, function(err) {
        t.ifError(err, "no error unlinking file");
        t.end();
      });
    });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e69e598151ccc1a0 — Filesystem access.

pkgs/npm/[email protected]/test.js:238

  var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

tiktoken

npm dependency

expand_more 8 low-confidence finding(s)

low egress dependency Excluded from app score #4b2b9f30fb86c130 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lite/load.cjs:148

        : (url) => fetch(url).then((r) => r.text());

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b9fd9d3cbb87c00a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lite/load.js:145

        : (url) => fetch(url).then((r) => r.text());

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #bf2e0416812e5790 — Filesystem access.

pkgs/npm/[email protected]/lite/tiktoken.cjs:5

const fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2221d24e00ad4da4 — Filesystem access.

pkgs/npm/[email protected]/lite/tiktoken.cjs:29

    bytes = fs.readFileSync(candidate);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #fc2554a3d1b9fa0b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/load.cjs:148

        : (url) => fetch(url).then((r) => r.text());

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f7cc7303f9d85355 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/load.js:145

        : (url) => fetch(url).then((r) => r.text());

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #34bd287e0112ca16 — Filesystem access.

pkgs/npm/[email protected]/tiktoken.cjs:5

const fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4097d5bdc8fc1742 — Filesystem access.

pkgs/npm/[email protected]/tiktoken.cjs:29

    bytes = fs.readFileSync(candidate);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

tmp

npm dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #3e9ee3343a75c4b1 — Filesystem access.

pkgs/npm/[email protected]/lib/tmp.js:12

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

undici

npm dependency

expand_more 13 low-confidence finding(s)

low env_fs dependency Excluded from app score #76244fdf42045f69 — Environment-variable access.

pkgs/npm/[email protected]/lib/dispatcher/client-h1.js:68

  const llhttpWasmData = process.env.JEST_WORKER_ID ? require('../llhttp/llhttp-wasm.js') : undefined

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8686dd09a582dbde — Environment-variable access.

pkgs/npm/[email protected]/lib/dispatcher/client-h1.js:75

  if (process.env.UNDICI_NO_WASM_SIMD === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d70aa154f4abb717 — Environment-variable access.

pkgs/npm/[email protected]/lib/dispatcher/client-h1.js:77

  } else if (process.env.UNDICI_NO_WASM_SIMD === '0') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #01931d7d88968bb6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/dispatcher/client-h2.js:851

    return session.request(headers, options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #4d9ff15552d00f30 — Environment-variable access.

pkgs/npm/[email protected]/lib/dispatcher/env-http-proxy-agent.js:26

    const HTTP_PROXY = httpProxy ?? process.env.http_proxy ?? process.env.HTTP_PROXY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #329e7ca947af547d — Environment-variable access.

pkgs/npm/[email protected]/lib/dispatcher/env-http-proxy-agent.js:33

    const HTTPS_PROXY = httpsProxy ?? process.env.https_proxy ?? process.env.HTTPS_PROXY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #673c8a9d2206314b — Environment-variable access.

pkgs/npm/[email protected]/lib/dispatcher/env-http-proxy-agent.js:142

    return process.env.no_proxy ?? process.env.NO_PROXY ?? ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe88d750f0d4f448 — Environment-variable access.

pkgs/npm/[email protected]/lib/mock/pending-interceptors-formatter.js:23

        colors: !disableColors && !process.env.CI

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #681e50d1ee584d80 — Filesystem access.

pkgs/npm/[email protected]/lib/mock/snapshot-recorder.js:424

      const data = await readFile(resolve(path), 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd4630bcc3d3cdd6 — Filesystem access.

pkgs/npm/[email protected]/lib/mock/snapshot-recorder.js:470

    await writeFile(resolvedPath, JSON.stringify(data, null, 2), { flush: true })

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #49d2f9d001d29593 — Filesystem access.

pkgs/npm/[email protected]/scripts/strip-comments.js:7

  ? transcode(readFileSync('./undici-fetch.js'), 'utf8', 'latin1')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3ee3576d32445a5d — Filesystem access.

pkgs/npm/[email protected]/scripts/strip-comments.js:8

  : readFileSync('./undici-fetch.js')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d5c97cf4182c4718 — Filesystem access.

pkgs/npm/[email protected]/scripts/strip-comments.js:10

writeFileSync('./undici-fetch.js', buffer.toString('latin1'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

vscode-material-icons

npm dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #699011d87ab288b8 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/app/main.ts:27

const port = process.env.PORT || 3000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

web-tree-sitter

npm dependency

expand_more 28 low-confidence finding(s)

low env_fs dependency Excluded from app score #e0ea72702342cfad — Filesystem access.

pkgs/npm/[email protected]/debug/web-tree-sitter.cjs:79

          var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d8e598f8b811f3a — Filesystem access.

pkgs/npm/[email protected]/debug/web-tree-sitter.cjs:83

            var ret = fs.readFileSync(filename);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8657373a241d82cb — Filesystem access.

pkgs/npm/[email protected]/debug/web-tree-sitter.cjs:89

            var ret = fs.readFileSync(filename, binary2 ? void 0 : "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #60aca271a748da62 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/debug/web-tree-sitter.cjs:140

              var response = await fetch(url, {
                credentials: "same-origin"
              });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0ed5e88c307e647d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/debug/web-tree-sitter.cjs:446

              var response = fetch(binaryFile, {
                credentials: "same-origin"
              });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #04d2c9290cec3f12 — Filesystem access.

pkgs/npm/[email protected]/debug/web-tree-sitter.cjs:3757

      binary2 = await fs2.readFile(input);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #7ea62e6fa28661f5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/debug/web-tree-sitter.cjs:3759

      const response = await fetch(input);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #ae1ac5c4a04f5ee4 — Filesystem access.

pkgs/npm/[email protected]/debug/web-tree-sitter.js:1488

      binary2 = await fs2.readFile(input);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #ec93492d5a285b11 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/debug/web-tree-sitter.js:1490

      const response = await fetch(input);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #489b1c562ac48d1d — Filesystem access.

pkgs/npm/[email protected]/debug/web-tree-sitter.js:1559

    var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d356ff9447999f3b — Filesystem access.

pkgs/npm/[email protected]/debug/web-tree-sitter.js:1565

      var ret = fs.readFileSync(filename);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90564ab14e5758bf — Filesystem access.

pkgs/npm/[email protected]/debug/web-tree-sitter.js:1571

      var ret = fs.readFileSync(filename, binary2 ? void 0 : "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #9df0aed5783db0e0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/debug/web-tree-sitter.js:1622

        var response = await fetch(url, {
          credentials: "same-origin"
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1d4e5137d2a501c6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/debug/web-tree-sitter.js:1931

        var response = fetch(binaryFile, {
          credentials: "same-origin"
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #8613e587bf0aba70 — Filesystem access.

pkgs/npm/[email protected]/web-tree-sitter.cjs:70

          var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #11e5dc8d38381777 — Filesystem access.

pkgs/npm/[email protected]/web-tree-sitter.cjs:74

            var ret = fs.readFileSync(filename);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #694223a9f5656add — Filesystem access.

pkgs/npm/[email protected]/web-tree-sitter.cjs:79

            var ret = fs.readFileSync(filename, binary2 ? void 0 : "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #1b129712cd8b37da — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/web-tree-sitter.cjs:125

              var response = await fetch(url, {
                credentials: "same-origin"
              });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4f93fd50e37cedd4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/web-tree-sitter.cjs:265

              var response = fetch(binaryFile, {
                credentials: "same-origin"
              });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #64837d4f5cdff954 — Filesystem access.

pkgs/npm/[email protected]/web-tree-sitter.cjs:3159

      binary2 = await fs2.readFile(input);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #6bdf145c4ad165f9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/web-tree-sitter.cjs:3161

      const response = await fetch(input);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #4b36315748519132 — Filesystem access.

pkgs/npm/[email protected]/web-tree-sitter.js:1488

      binary2 = await fs2.readFile(input);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #328585ae7ade3ddf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/web-tree-sitter.js:1490

      const response = await fetch(input);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #cb9feeb84c824fec — Filesystem access.

pkgs/npm/[email protected]/web-tree-sitter.js:1550

    var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #66059a7a24ce35e4 — Filesystem access.

pkgs/npm/[email protected]/web-tree-sitter.js:1556

      var ret = fs.readFileSync(filename);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b4c9e06be820427 — Filesystem access.

pkgs/npm/[email protected]/web-tree-sitter.js:1561

      var ret = fs.readFileSync(filename, binary2 ? void 0 : "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #6e4f39054e3a2f47 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/web-tree-sitter.js:1607

        var response = await fetch(url, {
          credentials: "same-origin"
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2acf36c09707196f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/web-tree-sitter.js:1750

        var response = fetch(binaryFile, {
          credentials: "same-origin"
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

zhipu-ai-provider

npm dependency

expand_more 11 low-confidence finding(s)

low env_fs tooling Excluded from app score unknown #a508af3dbb2b0be1 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/examples/_shared.mjs:5

  const value = process.env[name];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3135c97634300224 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/examples/_shared.mjs:16

  const baseURL = process.env.ZHIPU_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #df212a114260fa9f — Environment-variable access.

pkgs/npm/[email protected]__reposrc/examples/_shared.mjs:17

  const providerName = process.env.ZHIPU_PROVIDER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a3f78d85e39f26b3 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/examples/_shared.mjs:31

  text: process.env.ZHIPU_TEXT_MODEL ?? "glm-4.7-flash",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7d6bfce3124b641c — Environment-variable access.

pkgs/npm/[email protected]__reposrc/examples/_shared.mjs:32

  reasoning: process.env.ZHIPU_REASONING_MODEL ?? "glm-4.7-flash",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #dfcaa846d0599f4e — Environment-variable access.

pkgs/npm/[email protected]__reposrc/examples/_shared.mjs:33

  vision: process.env.ZHIPU_VISION_MODEL ?? "glm-4.6v-flash",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cca5874f36490382 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/examples/_shared.mjs:34

  embedding: process.env.ZHIPU_EMBEDDING_MODEL ?? "embedding-3",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f1190b12ea9c9454 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/examples/_shared.mjs:35

  image: process.env.ZHIPU_IMAGE_MODEL ?? "glm-image",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bf616d2324e5357f — Environment-variable access.

pkgs/npm/[email protected]__reposrc/examples/generate-text-with-images.mjs:12

  process.env.EXAMPLE_IMAGE_URL ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #0484fc3559e8ac23 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]__reposrc/src/test-server.ts:51

    http.post(url, async ({ request }) => {
      const requestBody = await request.text();
      const requestHeaders: Record<string, string> = {};
      request.headers.forEach((value, key) => {
        requestHeaders[key] = value;
      });

      let requestBodyJson: unknown;
      try {
        requestBodyJson = JSON.parse(requestBody);
      } catch (e) {
        console.error("Failed to parse request body:", requestBody);
        throw e;
      }

      const call: ServerCall = {
        requestBody,
        requestHeaders,
        requestBodyJson,
      };

      urlConfig.calls.push(call);
      allCalls.push(call);

      const response = urlConfig.response;

      if (response.type === "json-value") {
        return HttpResponse.json(response.body as Record<string, unknown>, {
          headers: response.headers,
        });
      }

      if (response.type === "stream-chunks") {
        return new Response(response.chunks.join(""), {
          headers: {
            "Content-Type": "text/event-stream",
            "Cache-Control": "no-cache",
            Connection: "keep-alive",
            ...response.headers,
          },
        });
      }

      return new Response(null, { status: 500 });
    }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #47aac86cbe81dc23 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]__reposrc/src/zhipu-image-model.ts:122

        const imageResponse = await fetch(item.url, { signal: abortSignal });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

Skipped dependencies

Production

@lmstudio/sdk prod — dist-only: no readable source
@roo-code/core prod — registry 404
@roo-code/ipc prod — registry 404
partial-json prod — dist-only: no readable source
tree-sitter-wasms prod — no javascript source
ansi-to-html prod — scan budget exceeded
class-variance-authority prod — scan budget exceeded
clsx prod — scan budget exceeded
cmdk prod — scan budget exceeded
date-fns prod — scan budget exceeded
debounce prod — scan budget exceeded
hast-util-to-jsx-runtime prod — scan budget exceeded
i18next-http-backend prod — scan budget exceeded
katex prod — scan budget exceeded
knuth-shuffle-seeded prod — scan budget exceeded
lru-cache prod — scan budget exceeded
lucide-react prod — scan budget exceeded
mermaid prod — scan budget exceeded
react prod — scan budget exceeded
react-compiler-runtime prod — scan budget exceeded
react-dom prod — scan budget exceeded
react-i18next prod — scan budget exceeded
react-icons prod — scan budget exceeded
react-markdown prod — scan budget exceeded
react-remark prod — scan budget exceeded
react-textarea-autosize prod — scan budget exceeded
react-use prod — scan budget exceeded
react-virtuoso prod — scan budget exceeded
rehype-highlight prod — scan budget exceeded
rehype-katex prod — scan budget exceeded
remark-gfm prod — scan budget exceeded
remark-math prod — scan budget exceeded
remove-markdown prod — scan budget exceeded
shiki prod — scan budget exceeded
source-map prod — scan budget exceeded
stacktrace-js prod — scan budget exceeded
styled-components prod — scan budget exceeded
tailwind-merge prod — scan budget exceeded
tailwindcss prod — scan budget exceeded
tailwindcss-animate prod — scan budget exceeded
unist-util-visit prod — scan budget exceeded
use-sound prod — scan budget exceeded
vscrui prod — scan budget exceeded
@inkjs/ui prod — scan budget exceeded
@roo-code/vscode-shim prod — scan budget exceeded
@trpc/client prod — scan budget exceeded
@vscode/ripgrep prod — scan budget exceeded
commander prod — scan budget exceeded
cross-spawn prod — scan budget exceeded
fuzzysort prod — scan budget exceeded
ink prod — scan budget exceeded
superjson prod — scan budget exceeded
zustand prod — scan budget exceeded
@docusaurus/core prod — scan budget exceeded
@docusaurus/plugin-client-redirects prod — scan budget exceeded
@docusaurus/plugin-content-docs prod — scan budget exceeded
@docusaurus/plugin-sitemap prod — scan budget exceeded
@docusaurus/preset-classic prod — scan budget exceeded
@docusaurus/theme-common prod — scan budget exceeded
@easyops-cn/autocomplete.js prod — scan budget exceeded
@easyops-cn/docusaurus-search-local prod — scan budget exceeded
@mdx-js/react prod — scan budget exceeded
prism-react-renderer prod — scan budget exceeded

verified_user No application data leak found

App Privacy Score

bar_chart Score Breakdown

list Scan Summary

swap_horiz Application data flows

</> First-Party Code

first-party (npm): src

first-party (npm)

first-party (npm): apps/cli

first-party (npm): apps/docs

first-party (npm): apps/vscode-e2e

first-party (npm): apps/vscode-nightly

first-party (npm): packages/core

first-party (npm): packages/types

first-party (npm): packages/vscode-shim

first-party (npm): webview-ui

</> Dependencies

@google/genai

@mistralai/mistralai

axios

@ai-sdk/google

@ai-sdk/google-vertex

@anthropic-ai/sdk

@aws-sdk/credential-providers

@modelcontextprotocol/sdk

@qdrant/js-client-rest

@tanstack/react-query

@vscode/codicons

ai-sdk-provider-poe

chokidar

exceljs

fast-xml-parser

fastest-levenshtein

global-agent

gray-matter

mammoth

monaco-vscode-textmate-theme-converter

node-ipc

ollama

openai

os-name

pdf-parse

puppeteer-chromium-resolver

puppeteer-core

sanitize-filename

tiktoken

tmp

undici

vscode-material-icons

web-tree-sitter

zhipu-ai-provider

Skipped dependencies