Close Open Privacy Scan

link https://github.com/caolan/async

bolt Snapshot: commit 03fbed2

science engine v3

schedule 2026-07-08T02:05:25.471296+00:00

App Privacy Score

97 /100

Low privacy risk

Low risk · 16 finding(s)

Dependency score: 100 (Low risk)

bar_chart Score Breakdown

env_fs −3

list Scan Summary

0 high 0 medium 16 low

First-party packages: 1

Dependency packages: 0

Ecosystem: npm

swap_horiz Application data flows

No high- or medium-confidence application data-flow findings in this scan.

</> First-Party Code

first-party (npm)

npm first-party

expand_more 16 low-confidence finding(s)

low env_fs production #29c32375b300d04e — Filesystem access.

repo/perf/benchmark.js:6

var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c99d42a18fa40451 — Filesystem access.

repo/support/build.test.js:6

var fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a72f1ec2fe82a003 — Filesystem access.

repo/support/generate-index.js:4

const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7d711b56fefb8d04 — Filesystem access.

repo/support/generate-index.js:17

        template: cb => fs.readFile(path.join(__dirname, './index-template.js'), 'utf8', cb),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6243fd3e326a40ed — Filesystem access.

repo/support/generate-index.js:30

    fs.readFileSync(path.join(__dirname, 'aliases.txt'), 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9ebb5821ee8d9f78 — Filesystem access.

repo/support/jsdoc/jsdoc-fix-html.js:32

    fs.writeFile(filename, HTMLdata, callback);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #561634662ca07be2 — Filesystem access.

repo/support/jsdoc/jsdoc-fix-html.js:44

    fs.readFile(path.join(docsDir, mainModuleFile), 'utf8', (fileErr, mainModuleData) => {
        if (fileErr) return callback(fileErr);

        var $mainPage = $(mainModuleData);
        // each 'module' (category) has a separate page, with all of the
        // important information in a 'main' div. Combine all of these divs into
        // one on the actual module page (async)
        async.eachSeries(moduleFiles, (file, fileCallback) => {
            fs.readFile(path.join(docsDir, file), 'utf8', (err, moduleData) => {
                if (err) return fileCallback(err);
                var $modulePage = $(moduleData);
                var moduleName = $modulePage.find(sectionTitleClass).text();
                $modulePage.find(sectionTitleClass).attr('id', moduleName.toLowerCase());
                $mainPage.find(mainScrollableSection).append($modulePage.find(mainScrollableSection).html());
                return fileCallback();
            });
        }, (err) => {
            if (err) return callback(err);
            generateHTMLFile(path.join(docsDir, docFilename), $mainPage, callback);
        });
    });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #336a3d55e95673d5 — Filesystem access.

repo/support/jsdoc/jsdoc-fix-html.js:52

            fs.readFile(path.join(docsDir, file), 'utf8', (err, moduleData) => {
                if (err) return fileCallback(err);
                var $modulePage = $(moduleData);
                var moduleName = $modulePage.find(sectionTitleClass).text();
                $modulePage.find(sectionTitleClass).attr('id', moduleName.toLowerCase());
                $mainPage.find(mainScrollableSection).append($modulePage.find(mainScrollableSection).html());
                return fileCallback();
            });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #713d62ffc4d4ce30 — Filesystem access.

repo/support/jsdoc/jsdoc-fix-html.js:155

        fs.readFile(filePath, 'utf8', (err, fileData) => {
            if (err) return fileCallback(err);
            var $file = $(applyPreCheerioFixes(fileData));

            var $vDropdown = $file.find('#version-dropdown');
            $vDropdown.find('.dropdown-toggle').contents().get(0).data = 'v'+VERSION+' ';
            $vDropdown.find('a[href="'+docFilename+'"]').text('v'+VERSION);

            fixToc(file, $file, moduleFiles);
            fixFooter($file);
            $file.find('[href="'+mainModuleFile+'"]').attr('href', docFilename);
            generateHTMLFile(filePath, $file, fileCallback);
        });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b79b463306fafd9a — Filesystem access.

repo/support/jsdoc/theme/publish.js:224

    fs.writeFileSync(outpath, html, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #af0dc9cc0075f845 — Filesystem access.

repo/support/jsdoc/theme/publish.js:240

                code: helper.htmlsafe( fs.readFileSync(sourceFiles[file].resolved, encoding) )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0b2772258256d824 — Filesystem access.

repo/support/jsdoc/theme/publish.js:700

        fs.writeFileSync(tutorialPath, html, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b6f52c76a58eba36 — Filesystem access.

repo/support/sync-cjs-package.js:3

var fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #71475d1bf847ac85 — Filesystem access.

repo/support/sync-cjs-package.js:4

var json = JSON.parse(fs.readFileSync(__dirname + "/../package.json"), "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a9dedad4b368f032 — Filesystem access.

repo/support/sync-es-package.js:3

var fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #249a036992d43831 — Filesystem access.

repo/support/sync-es-package.js:4

var json = JSON.parse(fs.readFileSync(__dirname + "/../package.json"), "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.