Close Open Privacy Scan
App Privacy Score
Low risk · 1286 finding(s)
Based on: 1 first-party package(s) · 13/14 deps analyzed
Dependency score: 82 (Low risk)
bar_chart Score Breakdown
list Scan Summary
swap_horiz External domains
aclanthology.orgaggregate.ee.engr.uky.eduapi.nuget.orgapi.openai.comarxiv.orgauai.orgauth.openai.combugreports.qt.iobugs.python.orgbugs.winehq.orgbugzilla.gnome.orgcdn.mathjax.orgcens.ioc.eecloud.google.comcookbook.openai.comcrates.iocreativecommons.orgdata-apis.orgdatatracker.ietf.orgdeveloper.mozilla.orgdigitalassets.lib.berkeley.edudl.acm.orgdmlc.github.iodoc.rust-lang.orgdocbook.sourceforge.netdocs.pydantic.devdocs.pytest.orgdocs.python.orgdocs.rsdocs.scipy.orgdoi.orgen.wikipedia.orgexample-resource.azure.openai.comgcc.gnu.orggit-scm.comgithub.comgitlab.freedesktop.orggraphics.stanford.edugroups.google.comhelp.openai.comhuggingface.coicml.ccimageio.readthedocs.ioipython.orgj3-fortran.orgjson-schema.orgkexue.fmlearn.microsoft.comlibsdl.orgmanagement.azure.commarc.najork.orgmathworld.wolfram.commatplotlib.orgmesonbuild.commetacpan.orgmodel-spec.openai.commodelcontextprotocol.ionicolas.limare.netnumpy.orgnumpydoc.readthedocs.ioomoindrot.github.ioopenai.comopenaipublic.blob.core.windows.netopenreview.netopensource.orgpackages.msys2.orgpandas.pydata.orgpenghao-bdsc.github.iopeople.eecs.berkeley.edupersonal.math.ubc.caplatform.openai.compublic.ukp.informatik.tu-darmstadt.depyinstaller.readthedocs.iopypi.orgpython-prompt-toolkit.readthedocs.ioraw.githubusercontent.comsbert.netschemas.microsoft.comscikit-image.orgscipy-cookbook.readthedocs.ioscipy-lectures.orgsourceware.orgstackoverflow.comtimeapi.iotruststore.readthedocs.iotyping.python.orgviews.scientific-python.orgweb.archive.orgwebsockets.readthedocs.iowixtoolset.orgwrapdb.mesonbuild.comwww.aclweb.orgwww.ams.orgwww.apache.orgwww.ecma-international.orgwww.github.comwww.google.comwww.intel.comwww.math.hmc.eduwww.mathjax.orgwww.mathworks.comwww.microsoft.comwww.oasis-open.orgwww.openblas.netwww.researchgate.netwww.sbert.netwww.scipy.orgwww.stixfonts.orgwww.w3.orgwww.xyz.edu
</> First-Party Code
first-party (python)
python first-partyexpand_more 47 low-confidence finding(s)
low env_fs — Filesystem access. 38 locations
low env_fs — Environment-variable access. 9 locations
</> Dependencies
mcp
python dependencyexpand_more 39 low-confidence finding(s)
low env_fs — Environment-variable access. 16 locations
pkgs/python/[email protected]/examples/clients/simple-auth-client/mcp_simple_auth_client/main.py:343
pkgs/python/[email protected]/examples/clients/simple-auth-client/mcp_simple_auth_client/main.py:344
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 6 locations
low env_fs — Filesystem access. 15 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 2 locations
model2vec
python dependencyexpand_more 9 low-confidence finding(s)
low env_fs — Environment-variable access. 2 locations
low env_fs — Filesystem access. 7 locations
numpy
python dependencyexpand_more 982 low-confidence finding(s)
low env_fs — Filesystem access. 618 locations
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:106
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:155
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:676
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/105 generatorcustom/catter.py:8
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/129 build by default/mygen.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/129 build by default/mygen.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/228 custom_target source/x.py:2
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/228 custom_target source/x.py:4
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage1.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage1.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage2.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage2.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen1.py:9
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen2.py:9
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:10
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:43
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:50
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:57
low env_fs — Environment-variable access. 356 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 5 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 3 locations
openai
python dependencyexpand_more 69 low-confidence finding(s)
low env_fs — Filesystem access. 16 locations
low env_fs — Environment-variable access. 47 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 2 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 4 locations
orjson
python dependencyexpand_more 40 low-confidence finding(s)
low env_fs — Filesystem access. 40 locations
pathspec
python dependencyexpand_more 15 low-confidence finding(s)
low env_fs — Filesystem access. 15 locations
sentence-transformers
python dependencyexpand_more 58 low-confidence finding(s)
low env_fs — Environment-variable access. 7 locations
low env_fs — Filesystem access. 51 locations
pkgs/python/[email protected]/sentence_transformers/sentence_transformer/evaluation/nano_beir.py:353
pkgs/python/[email protected]/sentence_transformers/sentence_transformer/evaluation/nano_beir.py:358
tiktoken
python dependencyexpand_more 16 low-confidence finding(s)
low env_fs — Environment-variable access. 5 locations
low env_fs — Filesystem access. 8 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 3 locations
tree-sitter
python dependencyexpand_more 1 low-confidence finding(s)
with open(Path(__file__).with_name("pyproject.toml")) as f:Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
vicinity
python dependencyexpand_more 10 low-confidence finding(s)
low env_fs — Filesystem access. 10 locations
Skipped dependencies
Production
- matplotlib prod — sdist exceeds byte cap